Hello Jsto and welcome to
Computer Hope Forum. My name is Superdave but you can just call me SD. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.
1. I will be working on your
Malware issues. This
may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please
DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.
Go to Program Files and click on MalwareBytes-AntiMalware. Right-click on MBAM.exe and re-name it to something else like Jessica.exe and see if it will run then. Post the log if you get it run.-----------------------------------------------------------------You have
Viewpoint installed.
Viewpoint Media Player/Manager/Toolbar is considered as
Foistware instead of malware since it is installed without users approval but doesn't spy or do anything "bad".
More information:
*
ViewMgr.exe - Useless*
Viewpoint to Plunge Into AdwareIt is suggested to remove the program now. Go to
Start > Control Panel > Add/Remove Programs - (Vista & Win7 is
Programs and Features) and remove the following programs if present.
* Viewpoint
* Viewpoint Manager
* Viewpoint Media Player
* Viewpoint Toolbar
* Viewpoint Experience Technology----------------------------------------------------------------------Please go to
Jotti's malware scan(If more than one file needs scanned they must be done separately and logs posted for each one)* Copy the file path in the below Code box:
C:\DOCUME~1\Jessica\LOCALS~1\Temp\clclean.0001
* At the upload site, click once inside the window next to
Browse.
* Press
Ctrl+V on the keyboard (both at the same time) to paste the file path into the window.
* Next click
Submit file* Your file will possibly be entered into a queue which normally takes less than a minute to clear.
* This will perform a scan across multiple different virus scanning engines.
*
Important: Wait for all of the scanning engines to complete.
*
Once the scan is finished, Copy and then Paste the link in the address bar into your next reply.
--------------------------------------------------------------------------Download
Disable/Remove Windows Messenger to the desktop to remove Windows Messenger.
Do not confuse
Windows Messenger with
MSN Messenger because they are not the same.
Windows Messenger is a frequent cause of popups.
Unzip the file on the desktop. Open the
MessengerDisable.exe and choose the bottom box -
Uninstall Windows Messenger and click
Apply.Exit out of
MessengerDisable then delete the two files that were put on the desktop.
---------------------------------------------------------------------------------You have the incorrect version of HJT. Uninstall the one you have and go below to get the correct version. Run it again and post the log.HijackThisDownload and rename
HijackThis.exe (HJT)* Double-click on
HJTInstall.* Click on the
Install button.
* It will automatically place
HJT in
C:\Program Files\TrendMicro\HijackThis\HijackThis.exe.* Upon install,
HijackThis should open for you.
•
Close HijackThis and rename it.•Go to
C:\Program Files\Trend Micro\HijackThis.exe•Right click on
HijackThis.exe and select
Rename.•Type in
sniper.exe and press
Enter.•Right-click on
sniper.exe and select
Send To > Desktop (create shortcut).
* From the desktop open
HijackThis.* If using
Windows Vista, Right-click and
Run As Administrator.* Click on the
Do a system scan and save a log file button *
HijackThis will scan and then a log will open in
notepad.•
Copy and Paste the entire contents of the log in your post.
.
Do not have
HijackThis fix anything yet. Most of what it finds will be harmless or even required.
.
Although we have renamed
HijackThis to sniper, we will still refer to it as
HijackThis or HJT.