We’d like to remind Forumites to please avoid political debate on the Forum.
This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.
📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
PC or connection issues?
Comments
-
sorry I'm doing this all wrong- I ran the original programme again to see if McAffee was really turned off. Will do the next bit nowI’m a Forum Ambassador and I support the Forum Team on the eBay, Auctions, Car Boot & Jumble Sales, Boost Your Income, Praise, Vents & Warnings, Overseas Holidays & Travel Planning , UK Holidays, Days Out & Entertainments boards. If you need any help on these boards, do let me know.. Please note that Ambassadors are not moderators. Any posts you spot in breach of the Forum Rules should be reported via the report button, or by emailing forumteam@moneysavingexpert.com.All views are my own and not the official line of MoneySavingExpert.0
-
Yes, unfortunately something wasn't right.
Did you change the "Save as type" to "All Files" & drag & drop the cfscript into the combofix icon?
0 -
Yes, unfortunately something wasn't right.
Did you change the "Save as type" to "All Files" & drag & drop the cfscript into the combofix icon?
Yep done that now. This is th enew log that was generated
Part 1
ComboFix 12-08-20.02 - Debra 20/08/2012 23:30:37.3.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.3839.2635 [GMT 1:00]
Running from: c:\users\Debra\Desktop\ComboFix.exe
Command switches used :: c:\users\Debra\Desktop\CFScript.txt
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
SP: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\program files\Common Files\Authentium\AntiVirus5\vseamps.exe"
"c:\program files\Common Files\Authentium\AntiVirus5\vsedsps.exe"
"c:\program files\Common Files\Authentium\AntiVirus5\vseqrts.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Common Files\Authentium\AntiVirus5\vseamps.exe
c:\program files\Common Files\Authentium\AntiVirus5\vsedsps.exe
c:\program files\Common Files\Authentium\AntiVirus5\vseqrts.exe
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
\Service_vseamps
\Service_vsedsps
\Service_vseqrts
.
.
((((((((((((((((((((((((( Files Created from 2012-07-20 to 2012-08-20 )))))))))))))))))))))))))))))))
.
.
2012-08-20 17:35 . 2009-06-30 09:37 33800 ----a-w- c:\windows\system32\drivers\pavboot64.sys
2012-08-20 17:34 . 2012-08-20 17:34
d
w- c:\program files (x86)\Panda Security
2012-08-20 12:18 . 2012-08-20 12:18
d
w- c:\programdata\Sophos
2012-08-20 12:16 . 2012-08-20 12:16 73728 ----a-r- c:\users\Debra\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\SVRTgui.exe1_810EDD9E2F0A4E2BACF86673C38D9F48.exe
2012-08-20 12:16 . 2012-08-20 12:16 73728 ----a-r- c:\users\Debra\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\SVRTgui.exe_810EDD9E2F0A4E2BACF86673C38D9F48.exe
2012-08-20 12:16 . 2012-08-20 12:16 73728 ----a-r- c:\users\Debra\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\ARPPRODUCTICON.exe
2012-08-20 12:16 . 2012-08-20 12:16
d
w- c:\program files (x86)\Sophos
2012-08-19 08:02 . 2012-05-05 08:30 503808 ----a-w- c:\windows\system32\srcore.dll
2012-08-19 08:02 . 2012-05-05 07:44 43008 ----a-w- c:\windows\SysWow64\srclient.dll
2012-08-19 08:01 . 2012-02-11 06:36 751104 ----a-w- c:\windows\system32\win32spl.dll
2012-08-19 08:01 . 2012-02-11 06:29 67584 ----a-w- c:\windows\splwow64.exe
2012-08-19 08:01 . 2012-02-11 06:29 559104 ----a-w- c:\windows\system32\spoolsv.exe
2012-08-19 08:01 . 2012-02-11 05:44 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
2012-08-19 08:01 . 2012-07-04 22:04 73216 ----a-w- c:\windows\system32\netapi32.dll
2012-08-19 08:01 . 2012-07-04 22:01 58880 ----a-w- c:\windows\system32\browcli.dll
2012-08-19 08:01 . 2012-07-04 22:01 136704 ----a-w- c:\windows\system32\browser.dll
2012-08-19 08:01 . 2012-07-04 21:23 41472 ----a-w- c:\windows\SysWow64\browcli.dll
2012-08-19 08:01 . 2012-07-18 17:31 3146752 ----a-w- c:\windows\system32\win32k.sys
2012-08-19 08:01 . 2012-05-14 05:20 956416 ----a-w- c:\windows\system32\localspl.dll
2012-08-19 07:26 . 2012-08-19 07:26
d
w- c:\windows\SysWow64\Extensions
2012-08-19 07:26 . 2012-08-19 07:26
d
w- c:\windows\SysWow64\searchplugins
2012-08-18 21:23 . 2012-08-18 21:23
d
w- c:\programdata\Browser Manager
2012-08-14 15:50 . 2012-08-14 15:50
d
w- c:\users\Debra\AppData\Local\Deployment
2012-08-11 10:54 . 2012-08-11 10:54
d
w- c:\programdata\Tarma Installer
2012-08-11 10:54 . 2012-08-11 10:54
d
w- c:\users\Debra\AppData\Roaming\Babylon
2012-08-11 10:54 . 2012-08-11 10:54
d
w- c:\programdata\Babylon
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-19 23:06 . 2010-02-26 07:11 62134624 ----a-w- c:\windows\system32\MRT.exe
2012-07-03 12:46 . 2010-09-09 19:06 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-18 12:56 . 2012-06-18 12:56 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-18 12:56 . 2012-06-18 12:56 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-09 05:30 . 2012-07-12 06:56 14165504 ----a-w- c:\windows\system32\shell32.dll
2012-06-06 19:59 . 2012-06-06 19:59 1070152 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2012-06-06 05:50 . 2012-07-12 06:56 2003968 ----a-w- c:\windows\system32\msxml6.dll
2012-06-06 05:50 . 2012-07-12 06:56 1880064 ----a-w- c:\windows\system32\msxml3.dll
2012-06-06 05:09 . 2012-07-12 06:56 1389568 ----a-w- c:\windows\SysWow64\msxml6.dll
2012-06-06 05:09 . 2012-07-12 06:56 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll
2012-06-02 22:19 . 2012-06-27 22:13 38424 ----a-w- c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-27 22:14 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 22:19 . 2012-06-27 22:14 44056 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-27 22:14 57880 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-27 22:13 701976 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 22:15 . 2012-06-27 22:14 2622464 ----a-w- c:\windows\system32\wucltux.dll
2012-06-02 22:15 . 2012-06-27 22:13 99840 ----a-w- c:\windows\system32\wudriver.dll
2012-06-02 14:19 . 2012-06-27 22:13 186752 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-02 14:15 . 2012-06-27 22:13 36864 ----a-w- c:\windows\system32\wuapp.exe
2012-06-02 05:38 . 2012-07-12 06:56 95088 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-06-02 05:38 . 2012-07-12 06:56 152432 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-06-02 05:37 . 2012-07-12 06:56 459216 ----a-w- c:\windows\system32\drivers\cng.sys
2012-06-02 05:27 . 2012-07-12 06:56 340992 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 05:27 . 2012-07-12 06:56 307200 ----a-w- c:\windows\system32\ncrypt.dll
2012-06-02 04:48 . 2012-07-12 06:56 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2012-06-02 04:48 . 2012-07-12 06:56 225280 ----a-w- c:\windows\SysWow64\schannel.dll
2012-06-02 04:47 . 2012-07-12 06:56 219136 ----a-w- c:\windows\SysWow64\ncrypt.dll
2012-06-02 04:42 . 2012-07-12 06:56 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
.
.
((((((((((((((((((((((((((((( [EMAIL="SnapShot@2012-08-20_21.29.59"]SnapShot@2012-08-20_21.29.59[/EMAIL] )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-10-28 22:44 . 2012-08-20 22:18 53192 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-08-20 22:18 30438 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2010-02-25 15:33 . 2012-08-20 22:18 20052 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1758057839-1451841138-4249003403-1001_UserData.bin
- 2010-02-25 15:08 . 2012-08-20 20:42 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-02-25 15:08 . 2012-08-20 22:16 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-02-25 15:08 . 2012-08-20 22:16 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-02-25 15:08 . 2012-08-20 20:42 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-08-20 20:42 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-08-20 22:16 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2012-08-20 21:26 . 2012-08-20 21:26 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-08-20 22:38 . 2012-08-20 22:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-08-20 22:38 . 2012-08-20 22:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-08-20 21:26 . 2012-08-20 21:26 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 02:36 . 2012-08-20 12:01 628414 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2012-08-20 22:21 628414 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2012-08-20 12:01 110598 c:\windows\system32\perfc009.dat
+ 2009-07-14 02:36 . 2012-08-20 22:21 110598 c:\windows\system32\perfc009.dat
- 2009-07-14 05:01 . 2012-08-20 21:25 320380 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-08-20 22:37 320380 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 02:34 . 2012-08-20 15:41 10747904 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2009-07-14 02:34 . 2012-08-20 22:30 10747904 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2011-04-29 22:29 . 2012-08-20 22:37 48001748 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1758057839-1451841138-4249003403-1001-12288.dat
- 2011-04-29 22:29 . 2012-08-20 21:25 48001748 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1758057839-1451841138-4249003403-1001-12288.dat
.I’m a Forum Ambassador and I support the Forum Team on the eBay, Auctions, Car Boot & Jumble Sales, Boost Your Income, Praise, Vents & Warnings, Overseas Holidays & Travel Planning , UK Holidays, Days Out & Entertainments boards. If you need any help on these boards, do let me know.. Please note that Ambassadors are not moderators. Any posts you spot in breach of the Forum Rules should be reported via the report button, or by emailing forumteam@moneysavingexpert.com.All views are my own and not the official line of MoneySavingExpert.0 -
part 2:
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-03-21 1675160]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-07-05 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-08-19 421736]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-25 135664]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-25 135664]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2012-02-22 100912]
R3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-04-20 152064]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2011-05-10 51712]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-02 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2012-02-22 289664]
S0 pavboot;pavboot;c:\windows\system32\drivers\pavboot64.sys [2009-06-30 33800]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2008-06-16 55024]
S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [2012-02-22 75936]
S1 MOBKFilter;MOBKFilter;c:\windows\system32\DRIVERS\MOBK.sys [2010-04-13 66040]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-12-08 169312]
S2 Greg_Service;GRegService;c:\program files (x86)\Packard Bell\Registration\GregHSRW.exe [2009-08-28 1150496]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936]
S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936]
S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936]
S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2012-03-20 210584]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2012-03-20 162192]
S2 MOBKbackup;McAfee Online Backup;c:\program files (x86)\McAfee Online Backup\MOBKbackup.exe [2010-04-13 231224]
S2 Realtek11nCU;Realtek11nCU;c:\program files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [2010-04-16 36864]
S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2009-07-04 240160]
S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2012-02-22 65264]
S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2012-02-22 487296]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2009-06-26 83488]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192cu.sys [2010-07-13 748648]
.
.
--- Other Services/Drivers In Memory ---
.
*Deregistered* - mfeavfk01
.
Contents of the 'Scheduled Tasks' folder
.
2012-08-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-25 15:49]
.
2012-08-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-25 15:49]
.
.
X64 Entries
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK]
@="{3c3f3c1a-9153-7c05-f938-622e7003894d}"
[HKEY_CLASSES_ROOT\CLSID\{3c3f3c1a-9153-7c05-f938-622e7003894d}]
2010-04-13 20:11 3816248 ----a-w- c:\program files (x86)\McAfee Online Backup\MOBKshell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK2]
@="{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}"
[HKEY_CLASSES_ROOT\CLSID\{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}]
2010-04-13 20:11 3816248 ----a-w- c:\program files (x86)\McAfee Online Backup\MOBKshell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK3]
@="{b4caf489-1eec-c617-49ad-8d7088598c06}"
[HKEY_CLASSES_ROOT\CLSID\{b4caf489-1eec-c617-49ad-8d7088598c06}]
2010-04-13 20:11 3816248 ----a-w- c:\program files (x86)\McAfee Online Backup\MOBKshell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"McAfeeWrapperApplication"="c:\program files (x86)\McAfeeMOBK\WrapperTrayIcon.exe" [2010-12-07 453344]
"combofix"="c:\combofix\CF14276.3XE" [2009-07-14 344576]
.
Supplementary Scan
.
uStart Page = hxxp://www.google.co.uk/
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0809&m=ixtreme_m3720&r=173602100216p0305v1k5y47j1920p
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.0.1
DPF: {0A43D7AC-D6C1-4622-B309-BF975F427C0E} - hxxps://internetbankingplus2.firstdirect.com/ibplus/frontdoorFD.cab
FF - ProfilePath - c:\users\Debra\AppData\Roaming\Mozilla\Firefox\Profiles\a351s4p9.default\
FF - prefs.js: browser.search.selectedEngine - Secure Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.co.uk/
FF - prefs.js: keyword.URL - hxxp://uk.search.yahoo.com/search?fr=mcafee&p=
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
.
.
.
LOCKED REGISTRY KEYS
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Other Running Processes
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\windows\SysWOW64\rundll32.exe
c:\program files (x86)\Realtek\11n USB Wireless LAN Utility\RtWlan.exe
.
**************************************************************************
.
Completion time: 2012-08-20 23:42:15 - machine was rebooted
ComboFix-quarantined-files.txt 2012-08-20 22:42
ComboFix2.txt 2012-08-20 22:20
ComboFix3.txt 2012-08-20 21:34
.
Pre-Run: 175,162,605,568 bytes free
Post-Run: 174,885,175,296 bytes free
.
- - End Of File - - FD0BE58C37A37B93592727396EE4940CI’m a Forum Ambassador and I support the Forum Team on the eBay, Auctions, Car Boot & Jumble Sales, Boost Your Income, Praise, Vents & Warnings, Overseas Holidays & Travel Planning , UK Holidays, Days Out & Entertainments boards. If you need any help on these boards, do let me know.. Please note that Ambassadors are not moderators. Any posts you spot in breach of the Forum Rules should be reported via the report button, or by emailing forumteam@moneysavingexpert.com.All views are my own and not the official line of MoneySavingExpert.0 -
Looks like you missed the folder:: directive out of the copy & paste.
Go to C:\programdata and delete these 3 folders:
c:\programdata\Tarma Installer
c:\programdata\Babylon
c:\programdata\Browser Manager
0 -
Looks like you missed the folder:: directive out of the copy & paste.
Go to C:\programdata and delete these 3 folders:
c:\programdata\Tarma Installer
c:\programdata\Babylon
c:\programdata\Browser Manager
I've done that now
I would just mention my PC is running like a dream. I used to have to log onto the router every time I rebooted, but now it logs in automatically and it seems very quick.I’m a Forum Ambassador and I support the Forum Team on the eBay, Auctions, Car Boot & Jumble Sales, Boost Your Income, Praise, Vents & Warnings, Overseas Holidays & Travel Planning , UK Holidays, Days Out & Entertainments boards. If you need any help on these boards, do let me know.. Please note that Ambassadors are not moderators. Any posts you spot in breach of the Forum Rules should be reported via the report button, or by emailing forumteam@moneysavingexpert.com.All views are my own and not the official line of MoneySavingExpert.0 -
If you don't mind I'm giving up for the night now.
I really really appreciate the extremely detailed help and assistance i've received on here. Thank youI’m a Forum Ambassador and I support the Forum Team on the eBay, Auctions, Car Boot & Jumble Sales, Boost Your Income, Praise, Vents & Warnings, Overseas Holidays & Travel Planning , UK Holidays, Days Out & Entertainments boards. If you need any help on these boards, do let me know.. Please note that Ambassadors are not moderators. Any posts you spot in breach of the Forum Rules should be reported via the report button, or by emailing forumteam@moneysavingexpert.com.All views are my own and not the official line of MoneySavingExpert.0 -
Sounds good!
One more folder to go & we'll call it a night.
Click the start orb and type Run into the search box. (Or press your windows key + R).
In the run box, type or copy/paste:
%APPDATA%
Then click ok.
Look for the Babylon folder & delete it.0 -
Sounds good!
One more folder to go & we'll call it a night.
Click the start orb and type Run into the search box. (Or press your windows key + R).
In the run box, type or copy/paste:
%APPDATA%
Then click ok.
Look for the Babylon folder & delete it.
Done that now as well, the machine is running like new!
I really cannot thank you all enough, waddler I've sent you a pm.I’m a Forum Ambassador and I support the Forum Team on the eBay, Auctions, Car Boot & Jumble Sales, Boost Your Income, Praise, Vents & Warnings, Overseas Holidays & Travel Planning , UK Holidays, Days Out & Entertainments boards. If you need any help on these boards, do let me know.. Please note that Ambassadors are not moderators. Any posts you spot in breach of the Forum Rules should be reported via the report button, or by emailing forumteam@moneysavingexpert.com.All views are my own and not the official line of MoneySavingExpert.0
This discussion has been closed.
Confirm your email address to Create Threads and Reply
Categories
- All Categories
- 352.3K Banking & Borrowing
- 253.7K Reduce Debt & Boost Income
- 454.4K Spending & Discounts
- 245.3K Work, Benefits & Business
- 601.1K Mortgages, Homes & Bills
- 177.6K Life & Family
- 259.2K Travel & Transport
- 1.5M Hobbies & Leisure
- 16K Discuss & Feedback
- 37.7K Read-Only Boards