Hijack log help

ankspon

moved my info,thanks

aliEnRIK

Are you posting for a reason? Whats wrong with the computer?

To get hijack running properly, press the SHIFT key 'and' right click on the exe file and select 'RUN AS' (admin)

aliEnRIK

Define 'funny'

Please open malwarebytes, goto LOGS and post the DATABASE VERSION of the last log (Unless something was found in which case post the entire log)

TICK and FIX these in hijack -
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

ankspon

I have ticked and fixed the 2 in hijack log alienrik,do i need to do another scan?

aliEnRIK

Please run COMBOFIX
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Shut down your anti virus
Follow the simple instructions it gives
Post the COMPLETE log it creates here (Split into sections if need be) ~ if there are loads of 'SNAPSHOT' pages then leave them out
If it comes up with a RENAMING error then RIGHT click the exe file and RENAME and call it QWERTY (Making the complete file name 'QWERTY.exe') Or SAVE as 'QWERTY' on download
(If no log comes up or you lose it, COMBOFIX.TXT can be found in C drive)

ankspon

It says incompatible,i run windows 7,sorry for being thick but how do i turn off my virus and spyware

aliEnRIK

It is compatible so dont worry about that (Unless SP1 now prevents it from running)

Heres how to disable 360 -
http://www.ehow.com/how_5821205_turn-off-norton-360.html

ankspon

Hope that is correct,i appreciate your help.

aliEnRIK

Hows it running now?

ankspon

It seems fine,do i need to do anything else?.If not thankyou so much for your help it really is appreciated.What is Tarma installer please?

aliEnRIK

Tarma installer appears to be a legit installer system
But I believe its been used by a malicious program (or the program itself is a bogus version)

id recommend a clean up -

Download CCLEANER
http://www.piriform.com/ccleaner/download/slim
Run the CLEANER scan (UNTICK 'cookies')
Then run the REGISTRY scan (Backup the registry when it asks)

and one last (very long) scan
Download and run the FREE version of DR WEB
http://www.freedrweb.com/download+cureit/gr/
Turn your anti virus OFF
Click CANCEL to the 'Would you like to read purchase terms now?' message
Click START click OK
It will auto QUICK scan
After that set to scan the WHOLE computer and press the 'play' icon
***DO NOT UPGRADE TO FULL VERSION***