Random opening tabs when I download stuff

View previous topic View next topic Go down

Random opening tabs when I download stuff

Post by nikolay2013 on 29th July 2013, 1:27 am

I was installing this texture pack on firefox for this game called "Minecraft" but all of a sudden these random tabs open up spamming I quickly press alt + f4 before theres over a hundred of them. I tried installing this tdsskiller and scanned it but it said my computer is clean? So right now im pretty clueless and could use some of your advice's.

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 29th July 2013, 9:08 pm

Please help

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 30th July 2013, 1:57 am

Hello and welcome to GeekPolice.Net My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*******************************************************
Please download [You must be registered and logged in to see this link.]by Xplode onto your Desktop.

  • Please close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Delete.
  • Confirm each time with OK
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile in your reply.
  • You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.

********************************************************
Please download Malwarebytes Anti-Malware from [You must be registered and logged in to see this link.]
Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Full Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • Please save the log to a location you will remember.
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the entire report in your next reply.

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.
*************************************************
Please download [You must be registered and logged in to see this link.] to your desktop.

Warning! Once the scan is complete JRT will shut down your browser with NO warning.

Shut down your protection software now to avoid potential conflicts.

•Temporarily disable your Antivirus and any Antispyware real time protection before performing a scan. Click [You must be registered and logged in to see this link.] link to see a list of security programs that should be disabled and how to disable them.

•Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click JRT and select Run as Administrator

•The tool will open and start scanning your system.

•Please be patient as this can take a while to complete depending on your system's specifications.

•On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

•Copy and Paste the JRT.txt log into your next message.
**********************************************
Download Security Check by screen317 from one of the following links and save it to your desktop.

[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

* Double-click Security Check.bat
* Follow the on-screen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Post the contents of that document in your next reply.

Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 30th July 2013, 4:32 pm

Results of screen317's Security Check version 0.99.71
x64 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
avast! Antivirus
Windows Defender
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
McAfee SiteAdvisor
Malwarebytes Anti-Malware version 1.75.0.1300
Java 7 Update 25
Adobe Flash Player 11.8.800.94
Mozilla Firefox (22.0)
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
AVAST Software Avast AvastSvc.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 30th July 2013, 4:34 pm

Thanks Dave for helping me get rid of my nasty viruses I am 100% satisfied with your company I will recommanded this for my friends.

Is it safe if I uninstall the programs you told me and put up my avast?

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 30th July 2013, 5:04 pm

But when I try to install this texture it still open's spam tab's, although I am still happy that you help random people with their computer problem's.

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 30th July 2013, 6:07 pm

# AdwCleaner v2.306 - Logfile created 07/30/2013 at 15:31:38
# Updated 19/07/2013 by Xplode
# Operating system : Windows 8 (64 bits)
# User : Nikolay - NIKOLAY
# Boot Mode : Normal
# Running from : C:\Users\Nikolay\Downloads\adwcleaner(1).exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16537

[OK] Registry is clean.

-\\ Mozilla Firefox v22.0 (en-US)

File : C:\Users\Nikolay\AppData\Roaming\Mozilla\Firefox\Profiles\ipi4inr2.default\prefs.js

[OK] File is clean.

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Nikolay\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[S1].txt - [4031 octets] - [30/07/2013 12:50:00]
AdwCleaner[S2].txt - [866 octets] - [30/07/2013 15:31:38]

########## EOF - C:\AdwCleaner[S2].txt - [925 octets] ##########

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 30th July 2013, 6:30 pm

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
[You must be registered and logged in to see this link.]

Database version: v2013.07.30.07

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16635
Nikolay :: NIKOLAY [administrator]

Protection: Enabled

2013-07-30 12:56:14 PM
mbam-log-2013-07-30 (12-56-14).txt

Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 372691
Time elapsed: 39 minute(s), 56 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Users\Nikolay\Downloads\SoftonicDownloader_for_skype (1).exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
C:\Users\Nikolay\Downloads\SoftonicDownloader_for_skype.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.

(end)

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 30th July 2013, 6:32 pm

Results of screen317's Security Check version 0.99.71
x64 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
avast! Antivirus
Windows Defender
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.75.0.1300
Java 7 Update 25
Adobe Flash Player 11.8.800.94
Mozilla Firefox (22.0)
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 30th July 2013, 6:34 pm

Please take your time and do what you need to do with the files if you need anymore information just ask I got this page bookmarked.

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 30th July 2013, 7:26 pm

I would like to see the log from Junkware Removal Tool.

Download Combofix from any of the links below, and save it to your DESKTOP.
If your version of Windows defaults to you download folder you will need to copy it to your desktop.

[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

To prevent your anti-virus application interfering with ComboFix we need to disable it. See [You must be registered and logged in to see this link.] for a tutorial regarding how to do so if you are unsure.

  • Close any open windows and double click ComboFix.exe to run it.

    You will see the following image:



Click I Agree to start the program.

ComboFix will then extract the necessary files and you will see this:



As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. This will not occur in Windows Vista and 7

It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

If you did not have it installed, you will see the prompt below. Choose YES.



Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:



Click on Yes, to continue scanning for malware.

When finished, it will produce a report for you. Please post the contents of the log (C:\ComboFix.txt).

Leave your computer alone while ComboFix is running. ComboFix will restart your computer if malware is found; allow it to do so.

Note: Please Do NOT mouseclick combofix's window while its running because it may cause it to stall.

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 30th July 2013, 8:15 pm

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.2.9 (07.30.2013:1)
OS: Windows 8 x64
Ran by Nikolay on 2013-07-30 at 17:38:13.06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 2013-07-30 at 17:44:14.63
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 30th July 2013, 8:27 pm

ComboFix 13-07-30.03 - Nikolay 2013-07-30 17:48:56.1.2 - x64
Microsoft Windows 8 6.2.9200.0.1252.2.1033.18.3912.2823 [GMT -2.5:30]
Running from: c:\users\Nikolay\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\frapsvid.dll
.
.
((((((((((((((((((((((((( Files Created from 2013-06-28 to 2013-07-30 )))))))))))))))))))))))))))))))
.
.
2013-07-30 16:14 . 2013-07-30 16:14 -------- d-----w- c:\windows\ERUNT
2013-07-30 15:24 . 2013-07-30 15:24 -------- d-----w- c:\users\Nikolay\AppData\Roaming\Malwarebytes
2013-07-30 15:24 . 2013-07-30 15:24 -------- d-----w- c:\programdata\Malwarebytes
2013-07-30 15:24 . 2013-07-30 15:24 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-07-30 15:24 . 2013-04-04 17:20 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-07-30 15:24 . 2013-07-30 15:24 -------- d-----w- c:\users\Nikolay\AppData\Local\Programs
2013-07-30 15:20 . 2013-07-30 15:20 174 ----a-w- c:\windows\DeleteOnReboot.bat
2013-07-29 00:39 . 2013-07-30 16:44 -------- d-----w- c:\program files\McAfee
2013-07-29 00:29 . 2013-07-30 18:03 -------- d-----w- c:\programdata\McAfee
2013-07-29 00:13 . 2013-07-29 00:13 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files
2013-07-28 23:28 . 2013-07-28 23:28 972712 ----a-w- c:\windows\system32\deployJava1.dll
2013-07-28 23:28 . 2013-07-28 23:28 312232 ----a-w- c:\windows\system32\javaws.exe
2013-07-28 23:28 . 2013-07-28 23:28 1093032 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-07-28 23:28 . 2013-07-28 23:28 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-07-28 23:28 . 2013-07-28 23:28 189352 ----a-w- c:\windows\system32\javaw.exe
2013-07-28 23:28 . 2013-07-28 23:28 188840 ----a-w- c:\windows\system32\java.exe
2013-07-28 23:28 . 2013-07-28 23:28 -------- d-----w- c:\program files\Java
2013-07-28 15:18 . 2013-07-30 16:40 -------- d-----w- c:\users\Nikolay\AppData\Roaming\.minecraft
2013-07-25 19:12 . 2013-05-09 08:59 22600 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2013-07-25 17:07 . 2013-05-09 08:59 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-07-25 17:07 . 2013-05-09 08:59 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-07-25 17:07 . 2013-07-25 17:07 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-07-25 17:07 . 2013-07-25 17:07 1030952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-07-25 17:07 . 2013-05-09 08:59 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-07-25 17:07 . 2013-05-09 08:59 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-07-25 17:07 . 2013-05-09 08:58 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-07-25 17:05 . 2013-05-09 08:58 41664 ----a-w- c:\windows\avastSS.scr
2013-07-23 22:30 . 2013-07-23 22:30 -------- d-----w- c:\program files\Classic Shell
2013-07-23 20:51 . 2013-07-23 21:44 -------- d-----w- C:\Fraps
2013-07-22 21:27 . 2013-07-23 22:39 282296 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-07-22 21:27 . 2013-07-22 21:30 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-07-20 21:26 . 2013-07-23 22:39 282296 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-07-20 21:22 . 2013-07-20 21:22 -------- d-----w- c:\users\Nikolay\AppData\Local\PunkBuster
2013-07-20 04:04 . 2013-07-23 14:54 282296 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-07-20 03:21 . 2013-07-20 03:21 -------- d-----w- c:\program files (x86)\EA Games
2013-07-13 17:48 . 2013-04-11 22:22 1838080 ----a-w- c:\windows\system32\DWrite.dll
2013-07-13 17:48 . 2013-04-11 22:30 1421312 ----a-w- c:\windows\SysWow64\DWrite.dll
2013-07-13 17:48 . 2013-04-10 22:35 2035200 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\InkObj.dll
2013-07-13 17:48 . 2013-04-10 22:35 1272320 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-13 17:47 . 2013-04-10 22:35 1617920 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-13 17:47 . 2013-04-10 22:35 1306112 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-13 17:47 . 2013-04-10 22:35 1318912 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-13 17:47 . 2013-04-11 04:12 1413632 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Ink\InkObj.dll
2013-07-13 17:47 . 2013-04-11 04:12 1029632 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Ink\journal.dll
2013-07-13 17:46 . 2013-06-01 09:25 496640 ----a-w- c:\windows\SysWow64\qedit.dll
2013-07-13 17:46 . 2013-06-01 09:21 595968 ----a-w- c:\windows\system32\qedit.dll
2013-07-13 17:46 . 2013-05-30 23:14 4036096 ----a-w- c:\windows\system32\win32k.sys
2013-07-13 17:45 . 2013-06-21 05:04 19187712 ----a-w- c:\program files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2013-07-13 17:45 . 2013-06-21 04:46 18523648 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2013-07-13 17:43 . 2013-06-11 23:43 1767936 ----a-w- c:\windows\SysWow64\wininet.dll
2013-07-13 17:43 . 2013-06-11 23:25 603136 ----a-w- c:\windows\system32\msfeeds.dll
2013-07-13 17:43 . 2013-06-11 23:43 817664 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-07-13 17:43 . 2013-06-11 23:42 235520 ----a-w- c:\program files (x86)\Internet Explorer\IEShims.dll
2013-07-13 17:43 . 2013-06-11 23:26 51712 ----a-w- c:\windows\system32\ie4uinit.exe
2013-07-13 17:43 . 2013-05-04 06:59 2842112 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-13 17:43 . 2013-05-04 04:57 2620928 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-12 17:12 . 2013-07-12 17:12 6129024 ----a-w- c:\program files (x86)\Mozilla Firefox\Extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2013-07-12 17:12 . 2013-07-12 17:12 6129024 ----a-w- c:\program files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2013-07-11 14:13 . 2013-07-11 14:13 -------- d-----w- c:\programdata\McAfee Security Scan
2013-07-11 14:13 . 2013-07-12 15:26 -------- d-----w- c:\program files (x86)\McAfee Security Scan
2013-07-05 19:00 . 2013-07-05 19:00 -------- d-----w- c:\programdata\Nexon
2013-07-05 18:51 . 2013-07-05 19:56 -------- d-----w- C:\Nexon
2013-07-05 17:20 . 2013-05-15 22:35 144384 ----a-w- c:\windows\system32\tssdisai.dll
2013-07-03 13:11 . 2013-07-03 13:11 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-03 13:11 . 2013-07-03 13:11 -------- d-----w- c:\program files (x86)\Java
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-13 18:16 . 2013-05-01 18:58 78185248 ----a-w- c:\windows\system32\MRT.exe
2013-07-03 13:11 . 2013-04-27 22:14 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-07-03 13:11 . 2013-04-27 22:14 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-06-27 22:04 . 2012-07-26 08:14 78200 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-27 22:04 . 2012-07-26 08:14 693112 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-30 23:24 . 2013-06-15 17:07 1257472 ----a-w- c:\windows\system32\kernel32.dll
2013-05-28 13:05 . 2013-06-16 16:33 163328 ----a-w- c:\windows\SysWow64\FlashPlayerUpdateService.exe
2013-05-23 23:01 . 2013-06-15 17:07 1300992 ----a-w- c:\windows\system32\gdi32.dll
2013-05-23 22:27 . 2013-06-15 17:07 1022464 ----a-w- c:\windows\SysWow64\gdi32.dll
2013-05-15 22:37 . 2013-06-13 16:58 44032 ----a-w- c:\windows\SysWow64\UXInit.dll
2013-05-15 22:35 . 2013-06-13 16:58 53760 ----a-w- c:\windows\system32\UXInit.dll
2013-05-15 02:25 . 2013-06-15 17:07 888320 ----a-w- c:\windows\system32\autochk.exe
2013-05-15 02:25 . 2013-06-15 17:07 542208 ----a-w- c:\windows\system32\untfs.dll
2013-05-15 02:24 . 2013-06-15 17:07 793088 ----a-w- c:\windows\SysWow64\autochk.exe
2013-05-15 02:24 . 2013-06-15 17:07 482816 ----a-w- c:\windows\SysWow64\untfs.dll
2013-05-14 13:14 . 2013-06-13 16:58 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-05-14 09:23 . 2013-06-13 16:58 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-05-14 01:42 . 2012-07-26 08:13 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-04 07:58 . 2013-06-15 17:02 120736 ----a-w- c:\windows\system32\AuthHost.exe
2013-05-04 07:45 . 2013-06-13 16:59 2233600 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-05-04 07:34 . 2013-06-15 17:02 446720 ----a-w- c:\windows\system32\drivers\USBHUB3.SYS
2013-05-04 07:34 . 2013-06-15 17:02 213248 ----a-w- c:\windows\system32\drivers\UCX01000.SYS
2013-05-04 07:34 . 2013-06-15 17:02 284416 ----a-w- c:\windows\system32\drivers\spaceport.sys
2013-05-04 07:30 . 2013-06-15 17:02 58312 ----a-w- c:\windows\system32\wuauclt.exe
2013-05-04 06:59 . 2013-06-15 17:02 39424 ----a-w- c:\windows\system32\wuapp.exe
2013-05-04 06:59 . 2013-06-15 17:02 1483776 ----a-w- c:\windows\system32\VSSVC.exe
2013-05-04 06:59 . 2013-06-15 17:02 812544 ----a-w- c:\windows\system32\Magnify.exe
2013-05-04 06:59 . 2013-06-15 17:02 251904 ----a-w- c:\windows\system32\WUSettingsProvider.dll
2013-05-04 06:59 . 2013-06-15 17:02 141824 ----a-w- c:\windows\system32\wuwebv.dll
2013-05-04 06:59 . 2013-06-15 17:02 98304 ----a-w- c:\windows\system32\wudriver.dll
2013-05-04 06:59 . 2013-06-15 17:02 3241472 ----a-w- c:\windows\system32\wuaueng.dll
2013-05-04 06:59 . 2013-06-15 17:02 760320 ----a-w- c:\windows\system32\wuapi.dll
2013-05-04 06:59 . 2013-06-15 17:02 1619968 ----a-w- c:\windows\system32\wucltux.dll
2013-05-04 06:59 . 2013-06-15 17:02 13644288 ----a-w- c:\windows\system32\Windows.UI.Xaml.dll
2013-05-04 06:58 . 2013-06-15 17:02 10116096 ----a-w- c:\windows\system32\twinui.dll
2013-05-04 06:58 . 2013-06-15 17:02 328192 ----a-w- c:\windows\system32\ubpm.dll
2013-05-04 06:58 . 2013-06-15 17:02 1332736 ----a-w- c:\windows\system32\sysmain.dll
2013-05-04 06:58 . 2013-06-15 17:02 173568 ----a-w- c:\windows\system32\storewuauth.dll
2013-05-04 06:58 . 2013-06-15 17:02 330240 ----a-w- c:\windows\system32\stobject.dll
2013-05-04 06:58 . 2013-06-15 17:02 93696 ----a-w- c:\windows\system32\psmsrv.dll
2013-05-04 06:58 . 2013-06-15 17:02 470528 ----a-w- c:\windows\system32\netprofmsvc.dll
2013-05-04 06:58 . 2013-06-15 17:02 151552 ----a-w- c:\windows\system32\netprofm.dll
2013-05-04 06:58 . 2013-06-15 17:02 169984 ----a-w- c:\windows\system32\netplwiz.dll
2013-05-04 06:57 . 2013-06-15 17:02 17408 ----a-w- c:\windows\system32\muifontsetup.dll
2013-05-04 06:57 . 2013-06-15 17:02 560640 ----a-w- c:\windows\system32\mfmp4srcsnk.dll
2013-05-04 06:57 . 2013-06-15 17:02 501760 ----a-w- c:\windows\system32\DevicePairing.dll
2013-05-04 06:57 . 2013-06-15 17:02 122368 ----a-w- c:\windows\system32\biwinrt.dll
2013-05-04 06:57 . 2013-06-15 17:02 179712 ----a-w- c:\windows\system32\bisrv.dll
2013-05-04 06:57 . 2013-06-15 17:02 2305024 ----a-w- c:\windows\system32\authui.dll
2013-05-04 06:57 . 2013-06-15 17:02 389120 ----a-w- c:\windows\system32\BCP47Langs.dll
2013-05-04 06:57 . 2013-06-15 17:02 1131520 ----a-w- c:\windows\system32\AppXDeploymentServer.dll
2013-05-04 06:57 . 2013-06-15 17:02 708096 ----a-w- c:\windows\system32\AppXDeploymentExtensions.dll
2013-05-04 06:56 . 2013-06-15 17:02 419840 ----a-w- c:\windows\system32\intl.cpl
2013-05-04 04:58 . 2013-06-15 17:02 34304 ----a-w- c:\windows\SysWow64\wuapp.exe
2013-05-04 04:58 . 2013-06-15 17:02 758784 ----a-w- c:\windows\SysWow64\Magnify.exe
2013-05-04 04:58 . 2013-06-15 17:02 125952 ----a-w- c:\windows\SysWow64\wuwebv.dll
2013-05-04 04:58 . 2013-06-15 17:02 83968 ----a-w- c:\windows\SysWow64\wudriver.dll
2013-05-04 04:58 . 2013-06-15 17:02 621056 ----a-w- c:\windows\SysWow64\wuapi.dll
2013-05-04 04:57 . 2013-06-15 17:02 10788864 ----a-w- c:\windows\SysWow64\Windows.UI.Xaml.dll
2013-05-04 04:57 . 2013-06-15 17:02 8857088 ----a-w- c:\windows\SysWow64\twinui.dll
2013-05-04 04:57 . 2013-06-15 17:02 247296 ----a-w- c:\windows\SysWow64\ubpm.dll
2013-05-04 04:57 . 2013-06-15 17:02 303616 ----a-w- c:\windows\SysWow64\stobject.dll
2013-05-04 04:57 . 2013-06-15 17:02 18432 ----a-w- c:\windows\SysWow64\npmproxy.dll
2013-05-04 04:57 . 2013-06-15 17:02 151040 ----a-w- c:\windows\SysWow64\netplwiz.dll
2013-05-04 04:57 . 2013-06-15 17:02 115712 ----a-w- c:\windows\SysWow64\netprofm.dll
2013-05-04 04:57 . 2013-06-15 17:02 14336 ----a-w- c:\windows\SysWow64\muifontsetup.dll
2013-05-04 04:56 . 2013-06-15 17:02 411136 ----a-w- c:\windows\SysWow64\mfmp4srcsnk.dll
2013-05-04 04:56 . 2013-06-15 17:02 449536 ----a-w- c:\windows\SysWow64\DevicePairing.dll
2013-05-04 04:56 . 2013-06-15 17:02 92160 ----a-w- c:\windows\SysWow64\biwinrt.dll
2013-05-04 04:56 . 2013-06-15 17:02 2035712 ----a-w- c:\windows\SysWow64\authui.dll
2013-05-04 04:56 . 2013-06-15 17:02 309760 ----a-w- c:\windows\SysWow64\BCP47Langs.dll
2013-05-04 04:55 . 2013-06-15 17:02 389632 ----a-w- c:\windows\SysWow64\intl.cpl
2013-05-04 04:51 . 2013-06-15 17:02 14848 ----a-w- c:\windows\system32\rars.rs
2013-05-04 04:48 . 2013-06-15 17:02 83968 ----a-w- c:\windows\system32\drivers\hidclass.sys
2013-05-04 04:48 . 2013-06-15 17:02 27648 ----a-w- c:\windows\system32\drivers\hidusb.sys
2013-05-04 04:47 . 2013-06-15 17:02 427520 ----a-w- c:\windows\system32\drivers\rdbss.sys
2013-05-04 04:10 . 2013-06-15 17:02 14848 ----a-w- c:\windows\SysWow64\rars.rs
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]
@="{594D4122-1F87-41E2-96C7-825FB4796516}"
[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]
2013-06-29 13:19 594432 ----a-w- c:\program files\Classic Shell\ClassicExplorer32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-03 19604072]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2012-07-26 62976]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\StartUp\
Acer Backup Manager Tray.lnk - c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe -h -k [2012-8-23 533568]
McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe [2013-2-5 272248]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
R3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
R3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;c:\windows\System32\drivers\btath_bus.sys;c:\windows\SYSNATIVE\drivers\btath_bus.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\System32\drivers\btath_hcrp.sys;c:\windows\SYSNATIVE\drivers\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\System32\drivers\btath_rcp.sys;c:\windows\SYSNATIVE\drivers\btath_rcp.sys [x]
R3 DeviceFastLaneService;Device Fast-lane Service;c:\program files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe;c:\program files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe;c:\program files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 AtherosSvc;AtherosSvc;c:\windows\system32\AdminService.exe;c:\windows\SYSNATIVE\AdminService.exe [x]
S2 CCDMonitorService;CCDMonitorService;c:\program files (x86)\Acer\Acer Cloud\CCDMonitorService.exe;c:\program files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [x]
S2 RfButtonDriverService;Dritek RF Button Command Service;c:\windows\RfBtnSvc64.exe;c:\windows\RfBtnSvc64.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 BthLEEnum;Bluetooth Low Energy Driver;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 ePowerSvc;ePower Service;c:\program files\Acer\Acer Power Management\ePowerSvc.exe;c:\program files\Acer\Acer Power Management\ePowerSvc.exe [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C63x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C63x64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 Ps2Kb2Hid;PS/2 Keyboard to HID Driver;c:\windows\System32\drivers\aPs2Kb2Hid.sys;c:\windows\SYSNATIVE\drivers\aPs2Kb2Hid.sys [x]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPStor.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2013-07-30 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-29 13:05]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]
@="{594D4122-1F87-41E2-96C7-825FB4796516}"
[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]
2013-06-29 13:20 724992 ----a-w- c:\program files\Classic Shell\ClassicExplorer64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-08-07 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-08-07 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-08-07 440640]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = [You must be registered and logged in to see this link.]
mLocal Page = c:\windows\SysWOW64\blank.htm
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Nikolay\AppData\Roaming\Mozilla\Firefox\Profiles\ipi4inr2.default\
FF - ExtSQL: 2013-06-24 20:32; {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}; c:\program files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF - ExtSQL: 2013-07-20 00:51; [You must be registered and logged in to see this link.]; c:\users\Nikolay\AppData\Roaming\Mozilla\Firefox\Profiles\ipi4inr2.default\extensions\battlefieldheroespatcher@ea.com
FF - ExtSQL: 2013-07-25 14:35; [You must be registered and logged in to see this link.]; c:\program files\AVAST Software\Avast\WebRep\FF
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} - (no file)
HKLM-Run-BtPreLoad - c:\program files (x86)\Bluetooth Suite\BtPreLoad.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Completion time: 2013-07-30 17:55:14
ComboFix-quarantined-files.txt 2013-07-30 20:25
.
Pre-Run: 443,665,477,632 bytes free
Post-Run: 443,591,692,288 bytes free
.
- - End Of File - - 158DA7E45509294620B8849DF16D84F9
D41D8CD98F00B204E9800998ECF8427E

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 30th July 2013, 11:14 pm

It still wont download without the tab's spamming...

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 30th July 2013, 11:21 pm

The log shows that you have two AV progams on your computer; avast! Antivirus and Windows Defender . Windows 8 comes with it's own AV. If you use another AV makes sure that the Windows AV is disabled.

It still wont download without the tab's spamming....
Are you using FireFox?


  • Download [You must be registered and logged in to see this link.] on the desktop
  • Close all the running programs
  • Windows Vista/7 users: right click on RogueKiller.exe, click Run as Administrator
  • Otherwise just double-click on RogueKiller.exe
  • Pre-scan will start. Let it finish.
  • Click on SCAN button.
  • A report (RKreport.txt) should open. Post its content in your next reply. (RKreport could also be found on your desktop)
  • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again


Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 31st July 2013, 12:03 am

Yes I am using FireFox. But sometimes Internet Explorer opens up instead of FireFox, I dont see Internet Explorer in my control panel but thats a whole different conversation im just trying to get rid of the spamming tabs.


Last edited by nikolay2013 on 31st July 2013, 12:22 am; edited 1 time in total

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 31st July 2013, 12:10 am

RogueKiller V8.6.4 [Jul 29 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : [You must be registered and logged in to see this link.]
Website : [You must be registered and logged in to see this link.]
Blog : [You must be registered and logged in to see this link.]

Operating System : Windows 8 (6.2.9200 ) 64 bits version
Started in : Normal mode
User : Nikolay [Admin rights]
Mode : Scan -- Date : 07/30/2013 21:38:16
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 4 ¤¤¤
[HJ POL] HKLM\[...]\System : DisableRegistryTools (0) -> FOUND
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : DisableRegistryTools (0) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD5000BPVT-22HXZT3 +++++
--- User ---
[MBR] 400ff54dc8a4a4cefe7dd45f406b37de
[BSP] 9e3dfb9238b59faf0516f80394473424 : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 1 | Size: 2097151 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[0]_S_07302013_213816.txt >>





nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 31st July 2013, 12:20 am

I recieved two RKreport[0] folder's that are completely the same. And I did not know about the Windows Defender my brother recommanded Avast! Antivirus to me, so if I uninstall Avast! Antivirus? Windows Defender WILL protect my computer?

So what your telling me is I have to uninstall avast! antivirus to get rid of the spamming tabs?


Last edited by nikolay2013 on 31st July 2013, 1:23 am; edited 1 time in total (Reason for editing : More information.)

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 31st July 2013, 1:42 am

so if I uninstall Avast! Antivirus? Windows Defender WILL protect my computer?
Yes, that's what is protecting mine.
So what your telling me is I have to uninstall avast! antivirus to get rid of the spamming tabs?.
No, I'm was just saying that having more than one AV and more than one Firewall on your computer can cause conflicts such as slowness, computer closing etc.
Do you get pop-ups on Internet Explorer? Do you have any add-ons in Firefox? Can you give me a screenshot of the spam?


[You must be registered and logged in to see this link.]

Please run RogueKiller again and delete those items.

Please download [You must be registered and logged in to see this link.] ( 511KB ) to your desktop.

Double click the aswMBR.exe to run it



Click the "Scan" button to start scan

Note: Do not take action against any **Rootkit** entries until I have reviewed the log. Often there are false positives



On completion of the scan click save log, save it to your desktop and post in your next reply

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 31st July 2013, 2:15 am

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-07-30 23:44:00
-----------------------------
23:44:00.360 OS Version: Windows x64 6.2.9200
23:44:00.360 Number of processors: 2 586 0x2A07
23:44:00.361 ComputerName: NIKOLAY UserName: Nikolay
23:44:00.363 Initialze error 1
23:44:00.466 AVAST engine defs: 13073001
23:44:01.461 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000035
23:44:01.463 Disk 0 Vendor: WDC_WD5000BPVT-22HXZT3 01.01A01 Size: 476940MB BusType: 11
23:44:01.484 Disk 0 MBR read successfully
23:44:01.486 Disk 0 MBR scan
23:44:01.487 Disk 0 unknown MBR code
23:44:01.490 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
23:44:01.493 Disk 0 scanning C:\Windows\system32\drivers
23:44:01.496 Service scanning
23:44:02.325 Modules scanning
23:44:02.331 Disk 0 trace - called modules:
23:44:02.342 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys hal.dll iaStorA.sys
23:44:02.351 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800607a060]
23:44:02.354 3 CLASSPNP.SYS[fffff88001078fea] -> nt!IofCallDriver -> \Device\00000035[0xfffffa8004bec720]
23:44:02.361 AVAST engine scan C:\Windows
23:44:02.365 AVAST engine scan C:\Windows\system32
23:44:02.369 AVAST engine scan C:\Windows\system32\drivers
23:44:02.373 AVAST engine scan C:\Users\Nikolay
23:44:02.376 AVAST engine scan C:\ProgramData
23:44:02.380 Scan finished successfully
23:44:21.057 Disk 0 MBR has been saved successfully to "C:\Users\Nikolay\Pictures\MBR.dat"
23:44:21.060 The log file has been saved successfully to "C:\Users\Nikolay\Pictures\aswMBR.txt"



nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 31st July 2013, 2:30 am

[You must be registered and logged in to see this link.]


[You must be registered and logged in to see this link.]

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 31st July 2013, 2:32 am

I don't know how to make the picture's any bigger, sorry. all that's there is 9-10 spamming tabs and me pressing alt+f4 the other one is a FireFox error RIGHT before the spamming tabs when I exited FireFox.

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 31st July 2013, 2:48 am

Yeah I have add-ons ill tell you exactly everything it say's.

(Extension's)

avast! Online Security 8.0.1489
Skype Click to Call 6.10.0.13089 (disabled)

(Appearance) Default 22.0 (look's like paint)

(Plugin's)

Intel (R) Identity Protection Technology 2.1.4.2.0
Intel (R) Identity Protection Technology 2.1.42.0
Java Deployment Toolkit 7.0.250.17 (above) Java Deployment Toolkit 7.0.250.17 is known to be vulnerable. Use with caution.
Java(TM) Platform SE 7 U25 10.25.2.17
McAfee Security Scanner + 3.0.318.0
Roblox Launcher Plugin 1.2.8.24
Shockwave Flash 11.8.800.94

I wrote this because I couldn't copy and paste sorry if I spelled anything incorrectly. Also my computer is not facing slowness, computer closing.

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 31st July 2013, 2:50 am

I shall be waiting for the next step.

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 31st July 2013, 4:33 pm

Internet explorer sometimes pop-ups when I download something on FireFox it opens with internet explorer instead but I set FireFox as my default so, should'nt be happening now.

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 31st July 2013, 7:13 pm

If the spamming is only on FireFox I would suggest that you uninstall and re-install Firefox and see if that cures the problem. You could try disabling all your add-ons and see if that cures the problem first.

We need to fix the [You must be registered and logged in to see this link.] using aswMBR now.


  • Double click aswMBR.exe to run it like before
  • Once the scan finishes click FixMBR to remove the infection as illustrated below





  • Once the scan finishes click Save log to save the log to your Desktop



  • Copy and paste the contents of aswMBR.txt back here for review
.

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 31st July 2013, 9:26 pm

I RESET my FireFox and disabled all my Add-on's and it WORKS!!! Thank you Dave! You helped me with my computer problem! If I need anymore help Ill keep in touch, keep this site bookmarked just incase I run into anymore computer problem's.

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 31st July 2013, 10:35 pm

I RESET my FireFox and disabled all my Add-on's and it WORKS!!!
Now you can re-enable each one of them at a time and you will find the one that is causing the pop-ups.
Are you certain that your computer is working Ok because there appears to be something wrong with the MBR(Master boot Record)?

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 31st July 2013, 11:51 pm

My computer hasn't been faster browsing the web than ever but if there is a problem with the MBR ill be sure to follow your instruction's.

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 31st July 2013, 11:54 pm

[You must be registered and logged in to see this link.] wrote:My computer hasn't been faster browsing the web than ever but if there is a problem with the MBR ill be sure to follow your instruction's.
Two different scanners showed that there was a problem with the MBR so it would be best to try to fix it.

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 1st August 2013, 12:06 am

Yes sir, im downloading it right now its taking some time.

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 1st August 2013, 12:38 am

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-07-31 22:05:02
-----------------------------
22:05:02.915 OS Version: Windows x64 6.2.9200
22:05:02.915 Number of processors: 2 586 0x2A07
22:05:02.915 ComputerName: NIKOLAY UserName: Nikolay
22:05:03.165 Initialze error 1
22:05:03.337 AVAST engine defs: 13073101
22:05:52.137 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000035
22:05:52.137 Disk 0 Vendor: WDC_WD5000BPVT-22HXZT3 01.01A01 Size: 476940MB BusType: 11
22:05:52.153 Disk 0 MBR read successfully
22:05:52.153 Disk 0 MBR scan
22:05:52.169 Disk 0 unknown MBR code
22:05:52.169 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
22:05:52.169 Disk 0 scanning C:\Windows\system32\drivers
22:05:52.169 Service scanning
22:05:52.950 Modules scanning
22:05:52.950 Disk 0 trace - called modules:
22:05:52.950 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys hal.dll iaStorA.sys
22:05:52.950 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800607e3c0]
22:05:52.966 3 CLASSPNP.SYS[fffff880020abfea] -> nt!IofCallDriver -> \Device\00000035[0xfffffa8004bcc060]
22:05:52.966 AVAST engine scan C:\Windows
22:05:52.981 AVAST engine scan C:\Windows\system32
22:05:52.981 AVAST engine scan C:\Windows\system32\drivers
22:05:52.997 AVAST engine scan C:\Users\Nikolay
22:05:52.997 AVAST engine scan C:\ProgramData
22:05:53.013 Scan finished successfully
22:05:56.825 Disk 0 MBR fix error
22:06:32.515 Disk 0 MBR has been saved successfully to "C:\Users\Nikolay\Documents\MBR.dat"
22:06:32.515 The log file has been saved successfully to "C:\Users\Nikolay\Documents\aswMBR.txt"



nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 1st August 2013, 1:00 am

This is the first time I'm seeing this message about MBR on Windows 7. Do you have a Windows 7 OS disk?

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 1st August 2013, 1:19 am

I have Acer laptop its windows 8...

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 1st August 2013, 1:32 am

I have Acer laptop its windows 8....
Ok, that explains it. The MBR scanner hasn't caught to Windows 8. The slowness while on the net could be a problem with your ISP. Let's run a scan and see what's happening there.

Please download [You must be registered and logged in to see this link.] to Desktop and run it.



Checkmark the following boxes:

  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • List content of Hosts
  • List IP Configuration
  • Lst Last 10 Event Viewer Errors
  • List Users, Partitions and Memory Size

Click Go and copy/paste the log (Result.txt) into your next post.

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 1st August 2013, 1:36 am

MiniToolBox by Farbar Version: 13-07-2013
Ran by Nikolay (administrator) on 31-07-2013 at 23:05:36
Running from "C:\Users\Nikolay\Downloads"
Microsoft Windows 8 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

Qualcomm Atheros AR5BWB222 Wireless Network Adapter = Wi-Fi (Connected)
Bluetooth Device (Personal Area Network) = Bluetooth Network Connection (Media disconnected)
Qualcomm Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.30) = Ethernet (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled
set interface interface="Local Area Connection* 9" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Wi-Fi" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Local Area Connection* 12" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Bluetooth Network Connection" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled


popd
# End of IPv4 configuration



Windows IP Configuration

Host Name . . . . . . . . . . . . : Nikolay
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : gateway.2wire.net

Ethernet adapter Ethernet:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Qualcomm Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.30)
Physical Address. . . . . . . . . : 4C-72-B9-E9-70-5F
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Bluetooth Network Connection:

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 1st August 2013, 1:51 am

That doesn't look like the full log. Could you please run it again. I'll have a look at the log tomorrow. Goodnight.

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 1st August 2013, 1:55 am

***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

Qualcomm Atheros AR5BWB222 Wireless Network Adapter = Wi-Fi (Connected)
Bluetooth Device (Personal Area Network) = Bluetooth Network Connection (Media disconnected)
Qualcomm Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.30) = Ethernet (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled
set interface interface="Local Area Connection* 9" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Wi-Fi" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Local Area Connection* 12" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Bluetooth Network Connection" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled


popd
# End of IPv4 configuration



Windows IP Configuration

Host Name . . . . . . . . . . . . : Nikolay
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : gateway.2wire.net

Ethernet adapter Ethernet:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Qualcomm Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.30)
Physical Address. . . . . . . . . : 4C-72-B9-E9-70-5F
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Bluetooth Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
Physical Address. . . . . . . . . : 20-68-9D-86-50-A7
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 12:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
Physical Address. . . . . . . . . : 12-68-9D-86-0F-93
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wi-Fi:

Connection-specific DNS Suffix . : gateway.2wire.net
Description . . . . . . . . . . . : Qualcomm Atheros AR5BWB222 Wireless Network Adapter
Physical Address. . . . . . . . . : 20-68-9D-86-0F-93
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::258d:36c:1c92:8274%13(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.2.13(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : July 31, 2013 4:49:38 PM
Lease Expires . . . . . . . . . . : August 1, 2013 8:21:09 PM
Default Gateway . . . . . . . . . : 192.168.2.1
DHCP Server . . . . . . . . . . . : 192.168.2.1
DHCPv6 IAID . . . . . . . . . . . : 371222685
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-0E-B0-60-4C-72-B9-E9-70-5F
DNS Servers . . . . . . . . . . . : 192.168.2.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.gateway.2wire.net:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : gateway.2wire.net
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:14b8:2fd2:715d:1269(Preferred)
Link-local IPv6 Address . . . . . : fe80::14b8:2fd2:715d:1269%15(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled
Server: homeportal
Address: 192.168.2.1

Name: google.com
Addresses: 2607:f8b0:4006:803::100e
173.194.43.36
173.194.43.37
173.194.43.38
173.194.43.39
173.194.43.40
173.194.43.41
173.194.43.46
173.194.43.32
173.194.43.33
173.194.43.34
173.194.43.35


Pinging google.com [173.194.43.38] with 32 bytes of data:
Reply from 173.194.43.38: bytes=32 time=58ms TTL=53
Reply from 173.194.43.38: bytes=32 time=59ms TTL=53

Ping statistics for 173.194.43.38:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 58ms, Maximum = 59ms, Average = 58ms
Server: homeportal
Address: 192.168.2.1

Name: yahoo.com
Addresses: 98.138.253.109
98.139.183.24
206.190.36.45


Pinging yahoo.com [206.190.36.45] with 32 bytes of data:
Reply from 206.190.36.45: bytes=32 time=229ms TTL=48
Reply from 206.190.36.45: bytes=32 time=362ms TTL=48

Ping statistics for 206.190.36.45:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 229ms, Maximum = 362ms, Average = 295ms

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time=2ms TTL=128
Reply from 127.0.0.1: bytes=32 time=2ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 2ms, Average = 2ms
===========================================================================
Interface List
19...4c 72 b9 e9 70 5f ......Qualcomm Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.30)
18...20 68 9d 86 50 a7 ......Bluetooth Device (Personal Area Network)
14...12 68 9d 86 0f 93 ......Microsoft Wi-Fi Direct Virtual Adapter
13...20 68 9d 86 0f 93 ......Qualcomm Atheros AR5BWB222 Wireless Network Adapter
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
15...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.13 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.2.0 255.255.255.0 On-link 192.168.2.13 281
192.168.2.13 255.255.255.255 On-link 192.168.2.13 281
192.168.2.255 255.255.255.255 On-link 192.168.2.13 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.2.13 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.2.13 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
15 306 ::/0 On-link
1 306 ::1/128 On-link
15 306 2001::/32 On-link
15 306 2001:0:4137:9e76:14b8:2fd2:715d:1269/128
On-link
13 281 fe80::/64 On-link
15 306 fe80::/64 On-link
15 306 fe80::14b8:2fd2:715d:1269/128
On-link
13 281 fe80::258d:36c:1c92:8274/128
On-link
1 306 ff00::/8 On-link
15 306 ff00::/8 On-link
13 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None

========================= Event log errors: ===============================

Application errors:
==================
Error: (07/31/2013 11:17:00 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x10bc
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/31/2013 10:17:01 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0xee4
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/31/2013 09:17:00 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x838
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/31/2013 06:17:01 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x13d0
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/31/2013 06:12:27 PM) (Source: Application Hang) (User: )
Description: The program javaw.exe version 7.0.250.17 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 8b0

Start Time: 01ce8e2e5452b9ae

Termination Time: 23

Application Path: C:\Program Files\Java\jre7\bin\javaw.exe

Report Id: b24afa9e-fa21-11e2-bf32-20689d8650a7

Faulting package full name:

Faulting package-relative application ID:

Error: (07/31/2013 05:17:03 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x5b4
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/31/2013 03:17:01 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0xb24
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/31/2013 02:17:00 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x460
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/31/2013 01:17:02 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0xfc8
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/31/2013 00:17:01 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x8d4
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5


System errors:
=============
Error: (07/31/2013 04:49:09 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT AUTHORITY)
Description: 0xc000014d0

Error: (07/31/2013 04:19:23 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT AUTHORITY)
Description: 0xc000014d0

Error: (07/31/2013 11:25:31 AM) (Source: DCOM) (User: NIKOLAY)
Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}NikolayNikolayS-1-5-21-1342971106-3732818164-2557012195-1001LocalHost (Using LRPC)UnavailableUnavailable

Error: (07/31/2013 11:25:31 AM) (Source: DCOM) (User: NIKOLAY)
Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}NikolayNikolayS-1-5-21-1342971106-3732818164-2557012195-1001LocalHost (Using LRPC)UnavailableUnavailable

Error: (07/31/2013 11:24:17 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT AUTHORITY)
Description: 0xc000014d0

Error: (07/30/2013 05:53:31 PM) (Source: Service Control Manager) (User: )
Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

Error: (07/30/2013 05:53:00 PM) (Source: Application Popup) (User: )
Description: \??\C:\ComboFix\catchme.sys

Error: (07/30/2013 05:51:15 PM) (Source: Service Control Manager) (User: )
Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

Error: (07/30/2013 05:46:58 PM) (Source: Service Control Manager) (User: )
Description: The Skype C2C Service service terminated unexpectedly. It has done this 1 time(s).

Error: (07/30/2013 03:32:56 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT AUTHORITY)
Description: 0xc000014d0


Microsoft Office Sessions:
=========================
Error: (07/31/2013 11:17:00 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b10bc01ce8e59036f804cC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dll41613153-fa4c-11e2-bf32-20689d8650a7

Error: (07/31/2013 10:17:01 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8bee401ce8e50a21112a9C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dlle0183949-fa43-11e2-bf32-20689d8650a7

Error: (07/31/2013 09:17:00 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b83801ce8e483fed1b27C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dll7de2d964-fa3b-11e2-bf32-20689d8650a7

Error: (07/31/2013 06:17:01 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b13d001ce8e2f1abdf69dC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dll591fb7bd-fa22-11e2-bf32-20689d8650a7

Error: (07/31/2013 06:12:27 PM) (Source: Application Hang)(User: )
Description: javaw.exe7.0.250.178b001ce8e2e5452b9ae23C:\Program Files\Java\jre7\bin\javaw.exeb24afa9e-fa21-11e2-bf32-20689d8650a7

Error: (07/31/2013 05:17:03 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b5b401ce8e26b93cc9fdC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dllf85d0ae6-fa19-11e2-bf32-20689d8650a7

Error: (07/31/2013 03:17:01 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8bb2401ce8e15f549cac0C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dll33c94d9b-fa09-11e2-bf30-20689d8650a7

Error: (07/31/2013 02:17:00 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b46001ce8e0d938d1ec9C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dlld18d1e33-fa00-11e2-bf30-20689d8650a7

Error: (07/31/2013 01:17:02 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8bfc801ce8e0531d91746C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dll70b9366c-f9f8-11e2-bf30-20689d8650a7

Error: (07/31/2013 00:17:01 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b8d401ce8dfcd035823bC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dll0e9413b2-f9f0-11e2-bf30-20689d8650a7


CodeIntegrity Errors:
===================================
Date: 2013-07-30 17:53:00.104
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


========================= Memory info: ===================================

Percentage of memory in use: 42%
Total physical RAM: 3912.27 MB
Available physical RAM: 2265.73 MB
Total Pagefile: 4616.27 MB
Available Pagefile: 3045.66 MB
Total Virtual: 4095.88 MB
Available Virtual: 3963.55 MB

========================= Partitions: =====================================

1 Drive c: (Acer) (Fixed) (Total:445.95 GB) (Free:411.33 GB) NTFS

========================= Users: ========================================

User accounts for \\NIKOLAY

Administrator Guest Nikolay


**** End of log ****

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 1st August 2013, 7:09 pm

The speed of you ISP looks quite good. Please try running your own test [You must be registered and logged in to see this link.]

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 1st August 2013, 7:11 pm

[You must be registered and logged in to see this link.]

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 1st August 2013, 7:39 pm

Accidently toggled my windows defender off, dunno how to turn it back on.


(Nevermind uninstalled avast)

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 1st August 2013, 9:09 pm

Thank you dave for helping me fix my spamming tab's problem is this all I need to do or is there anymore download's required?

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 1st August 2013, 10:50 pm

Wow, we're almost neighbours. I'm in NB. Has your internet always been slow? Can you tell me the size of your harddrive and how much free space you have?

We can do some cleanup now.


Download this program and run it [You must be registered and logged in to see this link.] .It will remove ComboFix for you.

Click Start> Computer> right click the C Drive and choose Properties> enter
Click Disk Cleanup from there.



Click OK on the Disk Cleanup Screen.
Click Yes on the Confirmation screen.



This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive)
************************************************
Go to [You must be registered and logged in to see this link.] and get all critical updates.

----------

I suggest using [You must be registered and logged in to see this link.]. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

[You must be registered and logged in to see this link.]- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* [You must be registered and logged in to see this link.] from Spyware and Malware
* If you don't know what ActiveX controls are, see [You must be registered and logged in to see this link.]

Protect yourself against spyware using the Immunize feature in [You must be registered and logged in to see this link.] Guide: [You must be registered and logged in to see this link.] to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. [You must be registered and logged in to see this link.]

Check out [You must be registered and logged in to see this link.] for tips and free tools to help keep you safe in the future.

Also see [You must be registered and logged in to see this link.] for free cleaning/maintenance tools to help keep your computer running smoothly.
Safe Surfing!

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 1st August 2013, 11:37 pm

Ok thank's for telling me about this disk cleanup and microsoft window update's didn't know about them until you've told me taking a while for the disk cleanup though.

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 1st August 2013, 11:42 pm

I am very grateful Dave Thank You! for helping me, mostly of all thank's for helping me clean my machine

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 1st August 2013, 11:58 pm

Used space: 36.917.235.712 bytes 34.3 GB

Free space: 441.919.184.896 bytes 411 GB

Capacity: 478.836.420.608 bytes 455 GB


Also I ran the disk cleanup, got the latest update's, and got the WOT add-on.


nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 2nd August 2013, 12:00 am

Ok, I always like to know how much free space there is because that could affect how the computer works especially if it's slow.

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by nikolay2013 on 2nd August 2013, 12:13 am

Okay, Dave so is that all the download's I need to follow? Or is there more?

nikolay2013
Intermediate
Intermediate

Posts Posts : 68
Joined Joined : 2013-07-29
Gender Gender : Male
OS OS : Windows 8 x64
Protection Protection : Windows Defender
Points Points : 13189
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Random opening tabs when I download stuff

Post by Superdave on 2nd August 2013, 7:19 pm

[You must be registered and logged in to see this link.] wrote:Okay, Dave so is that all the download's I need to follow? Or is there more?
No, we're done here unless you have other issues.

Superdave
Captain
Captain

Posts Posts : 4202
Joined Joined : 2010-02-01
Gender Gender : Male
OS OS : Windows 8.1 and a dual-boot with XP Home SP3
Protection Protection : MSE, Windows Defender, Windows firewall
Points Points : 83201
# Likes # Likes : 0

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum