computer acting up

[FALLGUY]

http://virusscan.jotti.org/en/scanresult/e11e5c1d850b43b3b58f35c527b7ce0345afab06/19c6f710abac560bbabdd45dfdba5bdc1298af2a

[FALLGUY]

http://virusscan.jotti.org/en/scanresult/e11e5c1d850b43b3b58f35c527b7ce0345afab06/bc31d3533cb2dd5e9d500afabc18bc5bd008b9e5

[evilfantasy]

* Double-click OTM.exe to run it.
* Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy)

Code: [Select]

:services
cxxqtr
rewac
sdfsaevy

:files
C:\WINDOWS\system32\drivers\cxxqtr.sys
C:\WINDOWS\system32\drivers\rewac.sys
C:\WINDOWS\system32\drivers\sdfsaevy.sys

:Commands
[emptytemp]
[start explorer]

* Return to OTM, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
* Click the red Moveit! button.
* Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.

* Close OTM

Note: If a file or folder cannot be moved immediately you may be asked to reboot your computer in order to finish the move process. If asked to reboot, choose Yes.

[FALLGUY]

All processes killed
========== SERVICES/DRIVERS ==========
Error: No service named cxxqtr was found to stop!
Service\Driver key cxxqtr not found.
Error: No service named rewac was found to stop!
Service\Driver key rewac not found.
Error: No service named sdfsaevy was found to stop!
Service\Driver key sdfsaevy not found.
========== FILES ==========
C:\WINDOWS\system32\drivers\cxxqtr.sys moved successfully.
C:\WINDOWS\system32\drivers\rewac.sys moved successfully.
C:\WINDOWS\system32\drivers\sdfsaevy.sys moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: LocalService
->Temp folder emptied: 65748 bytes
->Temporary Internet Files folder emptied: 16786 bytes
->FireFox cache emptied: 0 bytes
 
User: moore family
->Temp folder emptied: 17761 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 38368434 bytes
->Flash cache emptied: 963 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: patti's place
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 664 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 37.00 mb
 
 
OTM by OldTimer - Version 3.1.12.0 log created on 05282010_113151

Files moved on Reboot...

Registry entries deleted on Reboot...

I wanted to let you know that the  Ask toolbar is part of the Webroot spy sweeper program and it gives me an error 1316 trying to read C:\WINDOWS\installer\Ask toolbar MSI

[evilfantasy]

I wanted to let you know that the  Ask toolbar is part of the Webroot spy sweeper program and it gives me an error 1316 trying to read C:\WINDOWS\installer\Ask toolbar MSI

When does this error occur?

[FALLGUY]

When I try to remove

[evilfantasy]

ESET Online Scan

Scan your computer with the ESET FREE Online Virus Scan

* Click the ESET Online Scanner button.

* For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
* Click on the esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop
* Double click on the esetsmartinstaller_enu.exe icon on your desktop.
* Place a check mark next to YES, I accept the Terms of Use.

* Click the Start button.
* Accept any security warnings from your browser.
* Leave the check mark next to Remove found threats and place a check next to Scan archives.
* Click the Start button.
* ESET will then download updates, install, and begin scanning your computer. Please be patient as this can take some time.
* When the scan completes, click List of found threats.
* Next click Export to text file and save the file to your desktop using a name such as ESETScan. Include the contents of this report in your next reply.
* Click the <<Back button then click Finish.

In your next reply please include the ESET Online Scan Log

[FALLGUY]

It asks if my Proxy is configured. Don't know much about that except it's my address? Can't update.

[evilfantasy]

What browser are you using?

[FALLGUY]

Mozzilla firefox

[evilfantasy]

Use Internet Explorer. It will be easier to run that way.

ESET Online Scan

Scan your computer with the ESET FREE Online Virus Scan

* Click the ESET Online Scanner button.

* Click the Start button.
* Accept any security warnings from your browser.
* Leave the check mark next to Remove found threats and place a check next to Scan archives.
* Click the Start button.
* ESET will then download updates, install, and begin scanning your computer. Please be patient as this can take some time.
* When the scan completes, click List of found threats.
* Next click Export to text file and save the file to your desktop using a name such as ESETScan. Include the contents of this report in your next reply.
* Click the <<Back button then click Finish.

In your next reply please include the ESET Online Scan Log

[FALLGUY]

I've change to bing. My search provider list has that and Ask. The pages freeze and it asks me if I want to debug the page. I say no and the page loads normal. The program still asks for proxy configuration.

[evilfantasy]

Use IE for this.

Use the Kaspersky Online Scanner

* Read through the requirements and privacy  statement and click on Accept  button.
* It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
* When the downloads have finished, click on Settings.
* Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:

* Spyware, Adware, Dialers, and other potentially dangerous programs
* Archives
* Mail databases

* Click on My Computer under Scan and then put the kettle on!
* Once the scan is complete, it will display the results. Click on View Scan Report.
* You will see a list of infected items there. Click on Save Report As....
* Save this report to a convenient place like your desktop. Change the Files of type to Text file (.txt) before clicking on the Save button.
* Copy and paste the report into your next reply.

[FALLGUY]

It will not run . I need java 1.5 or higher. Tried to download that with no success.

[evilfantasy]

Try one more.

Scan your computer with Panda ActiveScan

* Once you are on the Panda site click the Scan your PC now button.
* A new window will open...click the Scan Now button.
* If it wants to install an ActiveX component allow it.
* It will start downloading the files it requires for the scan. (Note: It may take a couple of minutes)
* You may get a warning from Internet Explorer that Panda is ready to install, please allow it.
* The scan will begin. Please be patient as it can take an hour or more to complete.
* When the scan completes, if anything malicious is detected, click the Export to: button (looks like a little Notepad).
* Save the ActiveScan.txt to a convenient location like your desktop.
* Note: You do not need to select any of the Disinfect options. We will remove any threats manually.

* Post the contents of the ActiveScan report in your next reply.