📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Pop ups

Options
245

Comments

  • MILLYMOLLY
    MILLYMOLLY Posts: 1,069 Forumite
    DDS (Ver_2012-11-20.01) - NTFS_x86
    Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 10.15.2
    Run by home at 18:49:09 on 2013-11-09
    Microsoft Windows 7 Ultimate 6.1.7600.0.1252.44.1033.18.2039.980 [GMT 0:00]
    .
    AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
    SP: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
    SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    ============== Running Processes ================
    .
    C:\PROGRA~1\AVG\AVG2014\avgrsx.exe
    C:\Program Files\AVG\AVG2014\avgcsrvx.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\taskhost.exe
    C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    C:\Windows\system32\Dwm.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\AVG\AVG2014\avgidsagent.exe
    C:\Program Files\AVG\AVG2014\avgwdsvc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    C:\Windows\system32\IoctlSvc.exe
    C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
    C:\Program Files\CyberLink\Shared files\RichVideo.exe
    C:\Windows\system32\rpcnet.exe
    C:\Windows\System32\igfxtray.exe
    C:\Windows\System32\hkcmd.exe
    C:\Windows\System32\igfxpers.exe
    Starting to save £2 coins again, but it is a struggle:rotfl:Not doing very well keep spending them
  • MILLYMOLLY
    MILLYMOLLY Posts: 1,069 Forumite
    C:\Windows\system32\sppsvc.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Windows\system32\igfxsrvc.exe
    C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
    C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
    C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
    C:\Program Files\NETGEAR\WNDA3200\WifiDevChkSvc.exe
    C:\Program Files\AVG\AVG2014\avgui.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
    C:\Program Files\Real\RealPlayer\Update\realsched.exe
    C:\Program Files\Brother\Brmfcmon\BrMfimon.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Windows\System32\spool\drivers\w32x86\3\E_FATIEGE.EXE
    C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
    C:\Program Files\NETGEAR\WNDA3200\WNDA3200WPSMgr.exe
    C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
    C:\Program Files\AVG\AVG2014\avgnsx.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
    C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
    C:\Program Files\Common Files\Java\Java Update\jucheck.exe
    C:\Windows\system32\dfrgui.exe
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\system32\conhost.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestr
    Starting to save £2 coins again, but it is a struggle:rotfl:Not doing very well keep spending them
  • MILLYMOLLY
    MILLYMOLLY Posts: 1,069 Forumite
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Windows\system32\svchost.exe -k bthsvcs
    C:\Windows\system32\svchost.exe -k defragsvc
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.google.com
    uSearch Bar = Preserve
    uSearch Page = hxxp://www.google.com
    uSearchAssistant = hxxp://www.google.com/ie
    Starting to save £2 coins again, but it is a struggle:rotfl:Not doing very well keep spending them
  • MILLYMOLLY
    MILLYMOLLY Posts: 1,069 Forumite
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\programdata\realnetworks\realdownloader\browserplugins\ie\rndlbrowserrecordplugin.dll
    BHO: ArcadeFrontier Addon: {6C8DB2EC-499B-4897-A784-0E3186C97E9D} - c:\users\home\appdata\local\arcadefrontier\ArcadeFrontier.dll
    BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
    mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
    mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
    mRun: [Persistence] c:\windows\system32\igfxpers.exe
    mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
    mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
    mRun: [LanguageShortcut] "c:\program files\cyberlink\powerdvd\language\Language.exe"
    mRun: [NBKeyScan] "c:\program files\nero\nero8\nero backitup\NBKeyScan.exe"
    mRun: [BrMfcWnd] c:\program files\brother\brmfcmon\BrMfcWnd.exe /AUTORUN
    mRun: [ControlCenter3] c:\program files\brother\controlcenter3\brctrcen.exe /autorun
    mRun: [AVG_UI] "c:\program files\avg\avg2014\avgui.exe" /TRAYONLY
    mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot
    mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    dRun: [Exetender] "c:\program files\free ride games\GPlayer.exe" /runonstartup
    dRun: [SearchProtect] \SearchProtect\bin\cltmng.exe
    StartupFolder: c:\users\home\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
    Starting to save £2 coins again, but it is a struggle:rotfl:Not doing very well keep spending them
  • MILLYMOLLY
    MILLYMOLLY Posts: 1,069 Forumite
    TCP: Interfaces\{C5D19111-02C7-430B-A519-3A43116BF108}\C496675626F687D233730383 : DHCPNameServer = 192.168.1.1
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -
    Notify: igfxcui - igfxdev.dll
    SSODL: WebCheck - <orphaned>
    SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
    mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\30.0.1599.101\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\users\home\appdata\roaming\mozilla\firefox\profiles\1h99tms1.default\
    FF - prefs.js: network.proxy.type - 0
    FF - component: c:\program files\avg\avg10\firefox4\components\avgssff4.dll
    FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
    FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
    FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll
    FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
    FF - plugin: c:\program files\common files\research in motion\bbwebsllauncher\NPWebSLLauncher.dll
    FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
    FF - plugin: c:\program files\google\update\1.3.21.165\npGoogleUpdate3.dll
    FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
    FF - plugin: c:\program files\real\realplayer\netscape6\nprpplugin.dll
    FF - plugin: c:\program files\win7codecs\rm\browser\plugins\nppl3260.dll
    FF - plugin: c:\program files\win7codecs\rm\browser\plugins\nprpjplug.dll
    FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlchromebrowserrecordext.dll
    FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlhtml5videoshim.dll
    FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlpepperflashvideoshim.dll
    FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\npdlplugin.dll
    FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_9_900_117.dll
    FF - plugin: c:\windows\system32\npDeployJava1.dll
    FF - plugin: c:\windows\system32\npmproxy.dll
    FF - ExtSQL: 2013-09-19 15:46; {1a68cbde-3e4c-4fae-bf49-af5ab9868e53}; c:\users\home\appdata\roaming\mozilla\firefox\profiles\1h99tms1.default\extensions\{1a68cbde-3e4c-4fae-bf49-af5ab9868e53}
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2013-9-2 145720]
    R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys
    Starting to save £2 coins again, but it is a struggle:rotfl:Not doing very well keep spending them
  • MILLYMOLLY
    MILLYMOLLY Posts: 1,069 Forumite
    [2013-9-2 223032]
    R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2013-8-20 102200]
    R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2013-9-8 27448]
    R1 Avgdiskx;AVG Disk Driver;c:\windows\system32\drivers\avgdiskx.sys [2013-9-25 120632]
    R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2013-9-2 209208]
    R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2013-9-10 22840]
    R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2013-9-2 176952]
    R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2013-8-1 193848]
    R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2012-9-4 37664]
    R1 jswpslwf;JumpStart Wireless Filter Driver;c:\windows\system32\drivers\jswpslwf.sys [2012-8-14 20384]
    R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2014\avgidsagent.exe [2013-10-3 3538480]
    R2 avgwd;AVG WatchDog;c:\program files\avg\avg2014\avgwdsvc.exe [2013-9-25 301152]
    R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\realnetworks\realdownloader\rndlresolversvc.exe [2013-8-14 39056]
    R2 TomTomHOMEService;TomTomHOMEService;c:\program files\tomtom home 2\TomTomHOMEService.exe [2013-7-2 93072]
    R2 WDCS_WNDA3200;NETGEAR WNDA3200 Device Checking Service;c:\program files\netgear\wnda3200\WifiDevChkSvc.exe [2012-8-14 167936]
    R3 Blackberry Device Manager;Blackberry Device Manager;c:\program files\common files\research in motion\usb drivers\BbDevMgr.exe [2013-1-18 577536]
    R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]
    S3 athur;Atheros AR9271 Wireless Network Adapter Service;c:\windows\system32\drivers\athur.sys [2012-8-14 1564160]
    S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2011-5-12 1025352]
    S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
    S3 jswpsapi;JumpStart Wi-Fi Protected Setup;c:\program files\netgear\wnda3200\jswpsapi.exe [2012-8-14 954368]
    .
    =============== Created Last 30 ================
    .
    2013-11-09 12:16:04
    d
    w- C:\AdwCleaner
    .
    ==================== Find3M ====================
    .
    Starting to save £2 coins again, but it is a struggle:rotfl:Not doing very well keep spending them
  • MILLYMOLLY
    MILLYMOLLY Posts: 1,069 Forumite
    2013-11-09 12:54:41 17408 ----a-w- c:\windows\system32\rpcnetp.exe
    2013-11-09 12:54:37 58288 ----a-w- c:\windows\system32\rpcnet.dll
    2013-10-09 10:13:14 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2013-10-09 10:13:14 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    2013-10-03 14:31:12 37664 ----a-w- c:\windows\system32\drivers\avgtpx86.sys
    2013-09-25 19:57:14 120632 ----a-w- c:\windows\system32\drivers\avgdiskx.sys
    2013-09-19 14:50:58 499712 ----a-w- c:\windows\system32\msvcp71.dll
    2013-09-19 14:50:58 348160 ----a-w- c:\windows\system32\msvcr71.dll
    2013-09-10 21:11:44 22840 ----a-w- c:\windows\system32\drivers\avgidsshimx.sys
    2013-09-08 21:12:16 27448 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
    2013-09-02 09:39:32 176952 ----a-w- c:\windows\system32\drivers\avgldx86.sys
    2013-09-02 09:28:06 145720 ----a-w- c:\windows\system32\drivers\avgidshx.sys
    2013-09-02 09:28:04 209208 ----a-w- c:\windows\system32\drivers\avgidsdriverx.sys
    2013-09-02 09:28:00 223032 ----a-w- c:\windows\system32\drivers\avglogx.sys
    .
    ============= FINISH: 18:49:46.38 ===============
    Starting to save £2 coins again, but it is a struggle:rotfl:Not doing very well keep spending them
  • MILLYMOLLY
    MILLYMOLLY Posts: 1,069 Forumite
    waddler_8 wrote: »
    Post me a DDS log - should take 2-3 minutes.

    Download DDS from the link below and save it to your desktop:

    Link

    After you've downloaded it and saved it to your desktop:
    • Double click DDS to run it.
    • Click Start
    • When it's finished, DDS will open two logs:
    1. DDS.txt
    2. Attach.txt
    Save both reports to your desktop.

    Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)

    Have done this and posted above thanks so much
    Starting to save £2 coins again, but it is a struggle:rotfl:Not doing very well keep spending them
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    edited 9 November 2013 at 9:23PM
    Download OTM by Old Timer from the link below and save it to your Desktop.

    LINK

    The script below will stop explorer & your desktop will temporarily disappear (it will return on reboot), & your recycle bin will be emptied.
    • Double click OTM.exe to run it.
    • Highlight & copy all the following code inside the codebox below. Do not include the word Code: 
      :Commands
[CreateRestorePoint]

:reg
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Exetender"=-
"SearchProtect"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C8DB2EC-499B-4897-A784-0E3186C97E9D}]

:Files
c:\users\home\appdata\roaming\mozilla\firefox\profiles\1h99tms1.default\extensions\{1a68cbde-3e4c-4fae-bf49-af5ab9868e53}
c:\users\home\appdata\local\arcadefrontier\ArcadeFrontier.dll

:Commands
[CreateRestorePoint]
[EMPTYTEMP]
    • Return to OTM, right click in the Paste instructions for Items to be Moved window (under the yellow bar) and choose Paste.
    • Push the large MoveIt! button.
    • Click OK to the prompt
    • OTM may ask to reboot the machine. Please Allow it to do so if asked.
    • The report should appear in Notepad after the reboot. Copy/paste the contents of that report back here in your next reply.
  • MILLYMOLLY
    MILLYMOLLY Posts: 1,069 Forumite
    I think AVG has stopped it, it says it's a trojan should I allow or protect
    Starting to save £2 coins again, but it is a struggle:rotfl:Not doing very well keep spending them
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 351K Banking & Borrowing
  • 253.1K Reduce Debt & Boost Income
  • 453.6K Spending & Discounts
  • 244.1K Work, Benefits & Business
  • 599K Mortgages, Homes & Bills
  • 177K Life & Family
  • 257.4K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture