HJT Log Urget help needed to remove "mywebsearch" virus

4743hudsonj

Ive ran combofix twice now, neither time did the log pop up when the blue command screen closes:cool:

aliEnRIK

Open C drive
'combofix.txt' is in there

4743hudsonj

aliEnRIK wrote: »

Open C drive
'combofix.txt' is in there

nope no text files it ran fine both times came up witht he message preparing logfile or whatever, closed down but then i was expecting the log file to pop up? searched c:/Combofix for txt files too, nothing. Odd.

The_Grandmaster

hmmm........

aliEnRIK

4743hudsonj wrote: »

nope no text files it ran fine both times came up witht he message preparing logfile or whatever, closed down but then i was expecting the log file to pop up? searched c:/Combofix for txt files too, nothing. Odd.

its not in C/combofix

Its in c drive (No folders)

4743hudsonj

aliEnRIK wrote: »

its not in C/combofix

Its in c drive (No folders)

no its not there, thats why i looked in c:/combofix to make sure. Then ran it a second time but to all appearances, it completed correctly, but definitely no log, im doing another one as we speak.

4743hudsonj

still no ideas? the third scan again completed fine but no log:mad:

aliEnRIK

Sorry, no clue about the log

TICK and FIX these in hijack ~
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O4 - HKLM\..\Run: [VideoWebCamera] "C:\Program Files\VideoWebCamera\VideoWebCamera.exe" -a
O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)


BING itself is microsofts search engine. I suspect that youve been infected due to something to do with chrome (Definitely thats where mywebsearch has come from)
Maybe try firefox to see if anything changes?

Thebiker

Hi


Please download OTL.exe from GeekstoGo

• Save it to your desktop.
• Double click on OTL.
• Click the "Scan All Users" checkbox.
  Under the Custom Scans/Fixes box at the bottom, paste in the following bold text.
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\*. /mp /s
  %SYSTEMDRIVE%\*.exe
  netsvcs
  msconfig
  drivers32
  CREATERESTOREPOINT
  
• Push the Run Scan button.
• Two reports will open, copy and paste them in a reply here:
  • OTL.txt <-- Will be opened
  • Extra.txt <-- Will be minimized

4743hudsonj

Ok its running that now..

alienrik... those HJT fixes have got the keyboard working again, i think anyways lol all that remains is that bing window.

Oddly enough HJT said
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
could not be removed, yet it hasnt appeared on subsequent scans