We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
The Forum now has a brand new text editor, adding a bunch of handy features to use when creating posts. Read more in our how-to guide

what is fbdownloader???? is it a virus and can i get rid??

13»

Comments

  • sitcom321
    sitcom321 Posts: 386 Forumite
    All processes killed
    ========== COMMANDS ==========
    Restore point Set: OTM Restore Point
    ========== REGISTRY ==========
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"http://www.google.co.uk" /E : value set successfully!
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae48ed75-5a56-4c5f-bbce-6f1ac3875f66}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ae48ed75-5a56-4c5f-bbce-6f1ac3875f66}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C585D593-E7F3-4852-A200-561686EE02E4}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C585D593-E7F3-4852-A200-561686EE02E4}\ not found.
    Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars not found.
    Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\SSync deleted successfully.
    Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\OMESupervisor deleted successfully.
    Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\SCheck deleted successfully.
    Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Snoozer deleted successfully.
    Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\DataMgr deleted successfully.
    Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Intermediate deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\"AppInit_DLLs"|"" /E : value set successfully!
    ========== SERVICES/DRIVERS ==========
    Error: Unable to stop service aswKbd!
    Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aswKbd deleted successfully.
    Error: No service named BackupStack was found to stop!
    Service\Driver key BackupStack not found.
    Error: No service named dealplylivem was found to stop!
    Service\Driver key dealplylivem not found.
    Error: No service named McComponentHostService was found to stop!
    Service\Driver key McComponentHostService not found.
    Error: No service named dealplylive was found to stop!
    Service\Driver key dealplylive not found.
    ========== FILES ==========
    c:\program files\DealPly folder moved successfully.
    c:\program files\MyPC Backup folder moved successfully.
    c:\program files\DealPlyLive\CrashReports folder moved successfully.
    c:\program files\DealPlyLive folder moved successfully.
    File/Folder c:\program files\mcafee security scan not found.
    c:\windows\system32\drivers\aswKbd.sys moved successfully.
    File/Folder c:\users\carol\appdata\roaming\micros~1\windows\startm~1\programs\startup\mypcba~1.lnk not found.
    File/Folder c:\progra~2\micros~1\windows\startm~1\programs\startup\mcafee~1.lnk not found.
    c:\progra~2\BitGuard\2.7.1769.27\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings folder moved successfully.
    c:\progra~2\BitGuard\2.7.1769.27\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension folder moved successfully.
    c:\progra~2\BitGuard\2.7.1769.27\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8} folder moved successfully.
    c:\progra~2\BitGuard\2.7.1769.27 folder moved successfully.
    c:\progra~2\BitGuard folder moved successfully.
    c:\users\carol\appdata\roaming\SSync folder moved successfully.
    c:\users\carol\appdata\local\omesuperv.exe moved successfully.
    c:\users\carol\appdata\roaming\SCheck folder moved successfully.
    c:\users\carol\appdata\roaming\Snz folder moved successfully.
    c:\users\carol\appdata\roaming\DataMgr folder moved successfully.
    c:\users\carol\appdata\roaming\Intermediate folder moved successfully.
    ========== COMMANDS ==========
    Restore point Set: OTM Restore Point

    [EMPTYTEMP]

    User: All Users

    User: Carol
    ->Temp folder emptied: 159830284 bytes
    ->Temporary Internet Files folder emptied: 401578998 bytes
    ->Java cache emptied: 191776 bytes
    ->Google Chrome cache emptied: 423303574 bytes
    ->Flash cache emptied: 523 bytes

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 56468 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Public

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 575316606 bytes
    %systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 3790391 bytes
    RecycleBin emptied: 1043951579 bytes

    Total Files Cleaned = 2,487.00 mb


    OTM by OldTimer - Version 3.1.21.0 log created on 01062014_221738
  • sitcom321
    sitcom321 Posts: 386 Forumite
    < regedit /e C:\reg.txt HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318} /c >
    C:\Users\Carol\Desktop\cmd.bat deleted successfully.
    C:\Users\Carol\Desktop\cmd.txt deleted successfully.
    < start C:\reg.txt /c >
    C:\Users\Carol\Desktop\cmd.bat deleted successfully.
    C:\Users\Carol\Desktop\cmd.txt deleted successfully.

    OTM by OldTimer - Version 3.1.21.0 log created on 01072014_064207
  • sitcom321
    sitcom321 Posts: 386 Forumite
    No keyboard yet
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    Do this.
    • Double click OTM.exe to run it.
    • Highlight & copy all the following code inside the codebox below. Do not include the word Code:
      :Commands
      [CreateRestorePoint]
      
      :reg
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
      "UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
        00
      
      :Commands
      [CreateRestorePoint]
      [Reboot]
      
    • Return to OTM, right click in the Paste instructions for Items to be Moved window (under the yellow bar) and choose Paste.
    • Push the large MoveIt! button.
    • Click OK to the prompt
    • OTM may ask to reboot the machine. Please Allow it to do so if asked.
    • The report should appear in Notepad after the reboot. Copy/paste the contents of that report back here in your next reply.
  • sitcom321
    sitcom321 Posts: 386 Forumite
    ======== COMMANDS ==========
    Restore point Set: OTM Restore Point
    ========== REGISTRY ==========
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}\\"UpperFilters"|hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,00 /E : value set successfully!
    ========== COMMANDS ==========
    Restore point Set: OTM Restore Point

    OTM by OldTimer - Version 3.1.21.0 log created on 01072014_173010
  • sitcom321
    sitcom321 Posts: 386 Forumite
    keyboard back :-)
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    You must have had Avast installed before - it left it's keyboard filter driver in there and when we removed it the keyboard lost it's functionality. All should be ok now.

    How are things running now?
  • sitcom321
    sitcom321 Posts: 386 Forumite
    seems to be okay, thank you for your help
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    No problem.

    When you're happy things are running ok run this and let me know when you've done it by posting the log.

    • Double click OTM.exe to run it.
    • Highlight & copy all the following code inside the codebox below. Do not include the word Code:
      :Commands
      [ClearAllRestorePoints]
      
    • Return to OTM, right click in the Paste instructions for Items to be Moved window (under the yellow bar) and choose Paste.
    • Push the large MoveIt! button.
    • Click OK to the prompt
    • The report should appear in Notepad. Copy and paste that here.
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 354.6K Banking & Borrowing
  • 254.4K Reduce Debt & Boost Income
  • 455.5K Spending & Discounts
  • 247.4K Work, Benefits & Business
  • 604.3K Mortgages, Homes & Bills
  • 178.5K Life & Family
  • 261.8K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.