barbinoh

Member
  • Content Count

    7
  • Joined

  • Last visited

Community Reputation

0 Neutral

About barbinoh

  • Rank
    New Member
  1. Hi, Just got a new pc with windows 7 and loaded Emsisoft Anti-Malware from a backup of the install file from last year. I am being prompted to update to a New Major Version. That is the *only* screen that will display whether I try to open anti-malware or hi-jack free. If I ok the update it successfully down loads 16k+ and appears to be fine. But if I click on either icon again I repeatedly get the same prompt to update. Any help with this would be appreciated Thanks, Barb
  2. Wow.. that was difficult... Had to do a few uninstalls and reinstalls to get every thing working. Laptop decided at one point it just wasn't going to reboot. Would start and then shutdown again. Finally did F2 and selected the C: drive (which is where it should have been booting from all the time) and it finally went to a system restore and booted up. Verified that all the "new" s/w was active. I had turned System Restore back on after installing the new versions of multiple programs after the OSI scan. The one program I can't get rid of is macromedia flash.. isn't this a really old version since Adobe bought flash some time back? I have done a search and cannot find anything macromedia, and a flash search doesn't show it either. But OSI keeps saying it is there. I suspect this is no longer being used since I've had Adobe Flash for a long time. If I can't find it on my system, how in the world do I get rid of it? ---------I just now thought about searching the registry and have found macromedia there. Can I delete these entries and be done with it? Is there anything else macromedia besides flash that I might need? This has really turned into an exercise for me, trying to pull on my (very) old knowledge about computers... haven't worked in the field for 7 years. You guys are fantastic and so patient! thanks!!
  3. One more question. Can I run the OTL using Cleanup once a week or so to keep this thing clean? If not that should I paste the aforementioned text into the text box and use run/fix?
  4. Things are back to normal. Thanks! I know I haven't been cleaning this thing up like I should but since I have so much space and had just completed a defrag a few days ago I wasn't concerned...but now it is nice and clean so all is good. Thanks so much for your help and follow through. I'm impressed with the support you offer. I have only had one or two other contacts with your group over the years but am always amazed at how easy it is to communicate with all of you. You folks deserve the price of the software for your support alone. Thanks a bunch!
  5. All done. Removed the last old Java and installed the new (thanks Lynx). Ran the OTL again. Only concern - had 2 warnings during this process that A Squared picked up on other trojans and removed the suspect files. My scan takes about 8-9 hours so will run the full scan again overnight and see if anything turns up. Thanks for all your help! Original question remains - How can I know if the original trojan was actually removed since the message I received when I attempted to delete it said it could not remove the file? Hmmm do not see an option to attach the latest OTL file so pasting it here. All processes killed ========== OTL ========== F:\AUTOEXEC.BAT moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7c25f16d-6f74-11e0-a199-00235a05f64b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7c25f16d-6f74-11e0-a199-00235a05f64b}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7c25f16d-6f74-11e0-a199-00235a05f64b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7c25f16d-6f74-11e0-a199-00235a05f64b}\ not found. File E:\ToolLauncher-Bootstrap.exe not found. C:\Windows\System32\uxt5CB0.tmp deleted successfully. C:\Windows\msdownld.tmp folder deleted successfully. ADS C:\ProgramData\TEMP:029E021F deleted successfully. ADS C:\ProgramData\TEMP:2A8A3140 deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 56507 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: OEM1 ->Temp folder emptied: 1358953 bytes ->Temporary Internet Files folder emptied: 229602697 bytes ->Java cache emptied: 1628478199 bytes ->FireFox cache emptied: 58978261 bytes ->Flash cache emptied: 24002 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 118270866 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 75826153 bytes Total Files Cleaned = 2,015.00 mb [EMPTYFLASH] User: All Users User: Default ->Flash cache emptied: 0 bytes User: Default User ->Flash cache emptied: 0 bytes User: OEM1 ->Flash cache emptied: 0 bytes User: Public Total Flash Files Cleaned = 0.00 mb C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully OTL by OldTimer - Version 3.2.23.0 log created on 05292011_144942 Files\Folders moved on Reboot... Registry entries deleted on Reboot...
  6. Thank you for your quick reply! Installed new Adobe with no problem. However, the Java doesn't list my OS (Vista 32 bit). Can you please point me to the correct version? Will run the OTL after new Java is installed. Removed Adobe 8.2.6 Removed Java 6 update 6 Thanks again, Barb
  7. Overnight scan showed Trojan.JS.FakeAV!IK. When I attempted to delete it I got a message that it could not be removed and to contact support. I have gone through the re-scan process via EEK and OTL and the risk is no longer reported. Can I know that the trojan has been removed and the message that it could not be removed was in error?