How to get rid of Browse to Save

bargainbird

Done
TY

waddler_8

No more ad's?

bargainbird

Nope i still have chinese ladies looking alluringly at me

waddler_8

• Open Malwarebytes, click the Protection tab
• Uncheck Enable Filesystem Protection & Enable Malicious Website Blocking
• Uncheck Start Protection Module with windows
• Reboot your computer.

After reboot download OTM by Old Timer and save it to your Desktop.

http://oldtimer.geekstogo.com/OTM.exe

• Right click OTM.exe and choose Run as Administrator to run it.
• Agree to any UAC prompt
• Copy the following code inside the codebox below. Do not include the word Code:

  :Commands
  [CreateRestorePoint]
  
  :processes
  killallprocesses
  
  :reg
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1B1C051C-03A7-510E-75E7-84CE8C79B577}]
  
  :Files
  c:\program files\VaudiX
  c:\programdata\Premium
  c:\programdata\Vaudix
  
  :Commands
  [CreateRestorePoint]
  [Reboot]
  

• Return to OTM, right click in the Paste instructions for Items to be Moved window (under the yellow bar) and choose Paste.
• Push the large MoveIt! button.
• Click OK to the prompt
• OTM may ask to reboot the machine. Please Allow it to do so if asked.
• The report should appear in Notepad after the reboot. Copy/paste the contents of that report back here in your next reply.

bargainbird

Hi,

I've run OTM, the s£xy ladies have gone now....but theres nothing in notepad....is that ok?

Thanks so much for all your help

waddler_8

Go to the folder C:\_otm\movedfiles

There should be a .log text file in there - post the contents.

bargainbird

========== COMMANDS ==========
Restore point Set: OTM Restore Point
========== PROCESSES ==========
All processes killed
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1B1C051C-03A7-510E-75E7-84CE8C79B577}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1C051C-03A7-510E-75E7-84CE8C79B577}\ deleted successfully.
========== FILES ==========
c:\program files\VaudiX folder moved successfully.
c:\programdata\Premium\VaudiX\DNL1.tmp folder moved successfully.
c:\programdata\Premium\VaudiX folder moved successfully.
c:\programdata\Premium folder moved successfully.
c:\programdata\Vaudix\data folder moved successfully.
c:\programdata\Vaudix folder moved successfully.
========== COMMANDS ==========
Restore point Set: OTM Restore Point

OTM by OldTimer - Version 3.1.21.0 log created on 12192012_183843

Ta Da

waddler_8

Good job.

• Double-click OTM.exe
• Click the CleanUp! button
• Select Yes when the Begin cleanup Process? Prompt appears
• If you are prompted to Reboot during the cleanup, select Yes
• The tool will delete itself once it finishes, if not, delete it yourself

Then delete all but your most recent restore point - http://windows.microsoft.com/en-GB/windows7/Delete-a-restore-point

Uninstall these: Java Auto Updater
Java(TM) 6 Update 37

Get the latest here: http://www.java.com/getjava/

Reason: http://blogs.technet.com/b/security/archive/2011/11/28/millions-of-java-exploit-attempts-the-importance-of-keeping-all-software-up-to-date.aspx

bargainbird

Thanks all done.....:beer:

waddler_8

bargainbird wrote: »

Thanks all done.....:beer:

Just one last thing, the DDS log shows MSE originally as being disabled , but Windows Defender as being enabled.

AV: Microsoft Security Essentials *Disabled/Updated* {BF5CEBDC-F2D3-7540-343C-F0CE11FD6E66}
SP: Microsoft Security Essentials *Disabled/Updated* {043D0A38-D4E9-7ACE-0E8C-CBBC6A7A24DB}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}.

I would ensure MSE is enabled. Reinstall it if necessary.

Other than that you're good to go.