ASC Logs

[Loretta]

Hi can anyone help me with my log file. I cant even run my ASC now :-( I had to download Hijack This to get the file but unsure what to fix, something has disabled my mouse click, i can right click and use the keyboard but tabbing is getting old. What ever it is wont let me run ASC, I redownloaded it and it will do initial scan but wont let me click the "repair button".

 

Thank you for any help.

 

 

Edit: This is so weird.....I log into my email and all of a sudden my mouse is working again....so i decide to try ASC again and now its working, grrrrrrr after 12 hours + so I am trying to submit a new log.

Hijack Analysis Report.txt

[333halfevil]

Hello there.

 

Please use Unlock and Delete to remove the following:

AskToolbar:

• C:\Program Files\AskBarDis\bar\bin\askBar.dll
  
• C:\Program Files\AskBarDis\bar\bin\AskService.exe
  
• C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
  

 

Please check the corresponding boxes in Hijack Scan to remove:

AskToolbar:

• O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
  
• O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
  
• O23 - Service: ASKService - Unknown - C:\Program Files\AskBarDis\bar\bin\AskService.exe
  
• O23 - Service: ASKUpgrade - Unknown - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
  

 

Zwinki:

• O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - [/url]http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/ZwinkyInitialSetup1[/url] .0.1.1.cab
  
• O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - [/url]http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.1.cab[/url]
  

 

Miscellaneous items:

• O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
  
• O2 - BHO: Search Helper - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
  
• O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - (no file)
  

[enoskype]

Hi Loretta,

 

-Update your Java to 1.6.0.16.

 

-Download JavaRa 1.15 to clean the old versions' residues and unnecessary java files.

 

-Update Adobe to version 9.2

 

-Delete the lines shown below:

 

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search Helper - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)

O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - (no file)

O3 - Toolbar: - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -

 

 

-I am not sure of the two lines below, check the files in VirusTotal.

 

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/ZwinkyInitialSetup1.0.1.1.cab

 

O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe

 

-I would advise you to uninstall Ask toolbar also. (Not a must.)

 

-You have too many running programs in the Startup, you can uncheck the unused ones in ASC tools.

 

Cheers.

[333halfevil]

Hi Loretta,

 

-Update your Java to 1.6.0.16.

 

-Download JavaRa 1.15 to clean the old versions' residues and unnecessary java files.

 

-Update Adobe to version 9.2

 

-Delete the lines shown below:

 

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search Helper - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)

O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - (no file)

O3 - Toolbar: - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -

 

 

-I am not sure of the two lines below, check the files in VirusTotal.

 

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/ZwinkyInitialSetup1.0.1.1.cab

O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe

 

-I would advise you to uninstall Ask toolbar also. (Not a must.)

 

-You have too many running programs in the Startup, you can uncheck the unused ones in ASC tools.

 

Cheers.

 

Hey Eno. This is offered by FunWebProducts otherwise known as MyWebSearch. They are seen as adware or a PUA (Potentially Unwanted Application). As for McciCMService.exe it is a legitimate file.

[enoskype]

Hi 333halfevil,

 

I haven't noticed that you have replied, sorry for the butt in .:-)

Now I am sure about what those two are.

 

Cheers.