First, Bearhsare. Then Cyberdefender Internet Security. Logs attache

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Kikicool, Sep 13, 2011.

  1. Kikicool

    Kikicool Private E-2

    UGH. So my husband downloaded bearshare.:-o I had a heck of a time removing, and don't think I have. My Firefox and Internet would both be still hijacked if I hadn't blocked the site, and set up files in the "host" thingy blocking them, too.

    I've been following advice on this website re: bearshare and on other forums (bleeping computer etc). SO. Everytime I ran some sort of virus thing, it came up clean, but the search engine was still bearshare. Thus, I just blocked it. I know it's still tehre...

    New problem. one of the solutions was to run combofix. I tried and it warned me that "Cyberdefender Internet Security" was running. I cannot find any reference to this in programs. There's not way to delete it from add/delete programs. I have no idea where it is coming from.

    Any help? P( I'm totally, completely lost but I follow directions VERY well. :) On that note, I have run malwarebytes, hijackthis and smitfraudfix and saved logs. I attach them all. I appreciate any and all help!! THANK YOU! Kiki
     

    Attached Files:

    Kikicool, Sep 13, 2011
    #1
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Kestrel13!, Sep 13, 2011
    #2
  3. Kikicool

    Kikicool Private E-2

    Sorry...will get on and do first thing in AM. I've read so many sites, I guess I was confused about what to post where anymore. :) Thanks.
     
    Kikicool, Sep 13, 2011
    #3
  4. Kikicool

    Kikicool Private E-2

    Okay, here are the rest of the logs that I was able to obtain. I could not do combofix OR rootrepeal.

    Combofix states that cyberdefender is running. I cannot locate any reference to this in order to turn it off.

    The first time I used rootrepeal, it began scanning and then just closed up. After that, each time Rootrepeal begins, I am able to select the C drive for scanning, then it perpetually initializes. When I hit ctrol+alt+dlt, it shows as "not responding." So I close it. Tried this several times.

    When I search the registry for bearshare, cyberdefender or mediabar, things DO turn up. I don't know how to show those to you. Please let me know, and I will attach something for that, too. :)

    Thank you again, and I hope this is more helpful than last post. :-o
     

    Attached Files:

    Last edited: Sep 14, 2011
    Kikicool, Sep 14, 2011
    #4
  5. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    J2SE Runtime Environment 5.0 Update 6 <--- Uninstall this outdated version of Java.
    Viewpoint Media Player <--- Also uninstall this.


    SystemLook

    Please download SystemLook from one of the links below and save it to your Desktop.
    Download Mirror #1
    Download Mirror #2
    • Double-click SystemLook.exe to run it.
    • Copy the content of the following codebox into the main textfield:
      Code:
      :regfind
cyberdefender
    • Click the Look button to start the scan.
    • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
    Note: The log can also be found on your Desktop entitled SystemLook.txt


    What is inside of these folders? Can you either tell me or show me with a screen shot please?
    • C:\Documents and Settings\Kate\Application Data\bsbandmltbpi
    • C:\Documents and Settings\All Users\Application Data\E148


    Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    • R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://safesearch.cyberdefender.com/smallsearch.html
    • R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wesmirch.com/
    • R3 - URLSearchHook: (no name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - (no file)
    • O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    • O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
    • O3 - Toolbar: (no name) - !{95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
    • O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    • O15 - Trusted Zone: *..pdf
    • O15 - Trusted Zone: www.limewire.com
    • O15 - Trusted Zone: http://web.mac.com
    • O23 - Service: TrueVector Internet Monitor (vsmon) - Unknown owner - (no file)

    After clicking Fix exit HJT.



    Download and run OTM.

    Download OTM by Old Timer and save it to your Desktop.

    Code:
    
:reg
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

:files
C:\Documents and Settings\Kate\Templates\1016249688
C:\Program Files\Internet Explorer\SET4D6B.tmp
C:\Program Files\Internet Explorer\SET4D6C.tmp
C:\Program Files\Internet Explorer\SET4D6E.tmp
C:\Program Files\Internet Explorer\SET4DCF.tmp
C:\Program Files\Internet Explorer\SET4DD0.tmp
C:\Program Files\Internet Explorer\SET4DD1.tmp
C:\windows\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP
C:\windows\system32\tmp.reg
C:\windows\system32\tmp.txt

:Commands
[emptytemp]
[Reboot]
    • Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
    • Push the large http://farm3.static.flickr.com/2782/4174320048_f01c448b32_o.png button.
    • OTM may ask to reboot the machine. Please do so if asked.
    • Copy everything in the Results window (under the green bar), and paste it into notepad, save it as something appropriate and attach it into your next reply.

    NOTE: If you are unable to copy/paste from this window (as will be the case if the machine was rebooted), open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTM\MovedFiles folder, and open the newest .log file present, and attach the contents of that document back here in your next post.


    Teatimer is running so perhaps this could be part of the reason why Combofix will not run for you. Follow the instructions to disable it below and then let's see if it runs.

    Please disable Spybot's TeaTimer.

    How to disable Spybot's TeaTimer

    Try running Combofix.


    I want you to run TDSSKiller so refer to the below for how to do so.

    TDSSkiller - How to run



    Please also download MBRCheck to your desktop
    • Double click MBRCheck.exe to run (vista and Win 7 right click and select Run as Administrator)
    • It will show a Black screen with some information that will contain either the below line if no problem is found:
      • Done! Press ENTER to exit...
    • Or you will see more information like below if a problem is found:
      • Found non-standard or infected MBR.
      • Enter 'Y' and hit ENTER for more options, or 'N' to exit:
    • Either way, just choose to exit the program at this point since we want to see only the scan results to begin with.
    • MBRCheck will create a log named similar to MBRCheck_07.16.10_00.32.33.txt which is random based on date and time.
    • Attach this log to your next message. (See: HOW TO: Attach Items To Your Post )

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista or Windows7) Then attach the new C:\MGlogs.zip file that will be created by running this.

    Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now!
     
    Kestrel13!, Sep 14, 2011
    #5
  6. Kikicool

    Kikicool Private E-2

    I uninstalled media player through control panel.
    I uninstalled old Java with JavaRa 1.16. I have a log if you would like it.

    Attached please find one for cyberdefender. I also ran one for bearshare and saved that and attached it, too

    There is nothing inside the first. Nothing. inside the second is one file, a shockwave file, called {5104336D-2A65-403D-8B9A-3BCFED7CEB19}.swf. It says it was modified on 12/14/10. It is 4 KB.

    Teatimer is running so perhaps this could be part of the reason why Combofix will not run for you. Follow the instructions to disable it below and then let's see if it runs.

    Here is where I ran into a problem. I deleted spybot a few a days ago through the add/delete program panel. Yet TeaTimer still runs on start up. I went to MSconfig to disable it. But when I restarted, I was told this would make my computer run in "selective Mode." not "normal mode." I know I'm supposed to run scans in normal mode... so I skipped this. Should I run the computer in selective mode just for the Combofix scan? Please advise and I'll do so. Meanwhile, I'll continue the rest of the steps in another post. Thanks!
     

    Attached Files:

    Last edited by a moderator: Sep 15, 2011
    Kikicool, Sep 15, 2011
    #6
  7. Kikicool

    Kikicool Private E-2

    (note: the first part of this reply posted last for some reason. There are two replies with logs in total!)

    Thank you so much for all your help so far. :) Just to update you: I did try to run combofix, it still says cyberdefender internet security is running. (should I run it anyway?) And, as for the bearshare issues, I mentioned I had blocked it in host files. But it must still be there because when I try to search by just typing words into an address bar, in Firefox, it just takes me a page telling me that website wasn't found. I used to be able to search by typing into the address bar. I minor inconvenience, but one that indicates that something is STILL there. Gah. I'm willing to do whatever comes next, and I can't tell you how I appreciate your help (and am amazed you can do this stuff!) Thank you!! :)
     

    Attached Files:

    Last edited by a moderator: Sep 15, 2011
    Kikicool, Sep 15, 2011
    #7
  8. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    • O3 - Toolbar: (no name) - !{95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
    • O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    • O23 - Service: TrueVector Internet Monitor (vsmon) - Unknown owner - (no file)

    After clicking Fix exit HJT.


    Delete these files using windows explorer.
    • C:\Documents and Settings\Kate\Templates\1016249688
    • C:\Program Files\Internet Explorer\SET4D6B.tmp
    • C:\Program Files\Internet Explorer\SET4D6C.tmp
    • C:\Program Files\Internet Explorer\SET4D6E.tmp
    • C:\Program Files\Internet Explorer\SET4DCF.tmp
    • C:\Program Files\Internet Explorer\SET4DD0.tmp
    • C:\Program Files\Internet Explorer\SET4DD1.tmp
    • C:\windows\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP
    Delete this folder
    • C:\Documents and Settings\Kate\Application Data\bsbandmltbpi


    Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.


    Please give ccleaner a run and then we can see how much crap has been left behind by Cyberdefender and Bearshare.

    Now rename Combofix.exe to b4dF8.com try and run it in normal mode and if that fails reboot into safe mode, please and try again.

    Regardless of the Combofix results.... do this next:

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista or Windows7) Then attach the new C:\MGlogs.zip file that will be created by running this.
     
    Kestrel13!, Sep 15, 2011
    #8
  9. Kikicool

    Kikicool Private E-2


    THANK YOU! Please let me know what to do next and I'll get on it. Do you think we're getting closer to finding the issue or is my computer just basically screwed? :confused
     

    Attached Files:

    Kikicool, Sep 16, 2011
    #9
  10. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    What things? Fix what?
    It appared to have been successful.
    Most welcome. :)
    I don't know what issues you are having at the moment, Describe to me how things are running. Any actual malware problems remain?
     
    Kestrel13!, Sep 16, 2011
    #10
  11. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Code:
    :files
C:\Documents and Settings\Kate\Local Settings\Application Data\1016249688

:Commands
[emptytemp]
[Reboot]
    • Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
    • Push the large http://farm3.static.flickr.com/2782/4174320048_f01c448b32_o.png button.
    • OTM may ask to reboot the machine. Please do so if asked.
    • Copy everything in the Results window (under the green bar), and paste it into notepad, save it as something appropriate and attach it into your next reply.

    NOTE: If you are unable to copy/paste from this window (as will be the case if the machine was rebooted), open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTM\MovedFiles folder, and open the newest .log file present, and attach the contents of that document back here in your next post.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista or Windows7) Then attach the new C:\MGlogs.zip file that will be created by running this.

    Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now!
     
    Kestrel13!, Sep 16, 2011
    #11
  12. Kikicool

    Kikicool Private E-2

    You had asked in another post what problems I was still having. I went to my hosts file and deleted the blocks I had put on .bearshare and .search.bearshare. I wanted to see if these were still on my ocmputer. I opened firefox, did a search and sure enough, it's baaaack. The search engine defaults to bearshare. So obviously, it is still somewhere on my computer. Sure, I could just add the host file again, but I just want it OFF my system--so I can search from address bar easily. Grrrr. Any ideas?

    The other problem is that I still can't run combofix because of the "Cyberdefender Internet Security" that is running. This shouldn't be on my system either. It seems that for all the junk we've gotten rid of, these pests remain. Sorry to be such a pest, but I'm just at a loss. You're help so far has been SO wonderful and appreciated. THANKS!
     

    Attached Files:

    Last edited by a moderator: Sep 17, 2011
    Kikicool, Sep 17, 2011
    #12
  13. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    We are going to be uninstalling your old version of FireFox and installing a new version. So do the below to save bookmarks:

    • Run FireFox and click Bookmarks.
    • Then select Organize Bootmarks.
    • Then on the next window click File and then select Export. Save the bookmarks.html file to your Desktop for later use in importing.

    Now download and save the installer for the current version of FireFox but DO NOT install it yet. Get it here: Mozilla FireFox

    You will need to exit FireFox now and use Internet Explorer to continue with the below until we reinstall FireFox.

    Start by uninstalling FireFox and then reboot. Do not skip the reboot.
    After reboot, delete the below folders:
    • C:\Program Files\Mozilla Firefox
    • C:\documents and settings\UserAccount\Application Data\Mozilla

    where UserAccount is the actual user account name being used.

    Now reinstall FireFox from the file previously downloaded.
    Import your bookmarks file. (similar process to exporting).

    Has that helped with the bearshare problem?
     
    Kestrel13!, Sep 17, 2011
    #13
  14. Kikicool

    Kikicool Private E-2

    Yes! Worked for Firefox!! Whooo hooo!! And I did the same with Internet Explorer, too.I had to remove and SP3 for XP and reinstall to do for Internet Explorer but that went off without a hitch. And it worked for IE, too! Thanks!! FEeling hopeful, I tried to run Combofix (with the new name) and alas. That still says Cyberdefender is running. Bah.
     
    Last edited by a moderator: Sep 18, 2011
    Kikicool, Sep 17, 2011
    #14
  15. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    CyberDefender is an old security program, it's not malware so there is no need for us to panic. Can I just ask, are you able to run Combofix if you ignore the warning about Cyberdefender running?
     
    Kestrel13!, Sep 18, 2011
    #15
  16. Kikicool

    Kikicool Private E-2

    I hadn't tried...that warning about running it while cyberdefender was running and possibly causing damage seemed pretty dire. Is it safe to give it a shot? I certainly will try if so.
     
    Kikicool, Sep 19, 2011
    #16
  17. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    It shouldn't be a problem, go ahead.
     
    Kestrel13!, Sep 19, 2011
    #17
  18. Kikicool

    Kikicool Private E-2

    '

    Okay! I did so and am attaching log. :) Sorry I didn't understand earlier that I could still run it.

    Also: I did a systemlook thing on cyberdefender and bearshare. I attach those logs. Can I just delete the keys they show on the text files attached? I know cyberdefender isn't malware, but I just don't understand how it is running when I can't even find it. That makes me...suspicious. I'd love it GONE. (but don't stress about this. This is my own admitted crazy.)

    Thank you so much for the help!! :) Computer running better already and much faster, too...
     

    Attached Files:

    Kikicool, Sep 19, 2011
    #18
  19. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    No, I too was misunderstanding, I should have realised the situation there.

    What software do you currently have installed for Norton/Symantec?


    Now we need to use ComboFix by sUBs

    • Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
      • If it is not on your Desktop, the below will not work.
    • Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
    • If ComboFix tells you it needs to update to a new version, make sure you allow it to update.
    • Open Notepad and copy/paste the text in the below quote box. Ensure you scroll down to select ALL the lines:
    Code:
    KILLALL::

Driver::
esgiguard
SecCenter::
{4FD5E2F7-3347-41EA-97B9-FEE1333949B5}
File::
c:\windows\Tasks\$~$Sys0$.job
c:\windows\002701_.tmp
DirLook::
c:\documents and settings\All Users\Application Data\E148
C:\b4df8
C:\sh4ldr
Folder::
c:\program files\AVG Secure Search
C:\$AVG
c:\documents and settings\All Users\Application Data\AVG2012
c:\program files\Enigma Software Group
c:\documents and settings\Kate\Application Data\AVG2012
c:\documents and settings\Kate\Application Data\AVG Secure Search
c:\program files\Common Files\AVG Secure Search
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
    • Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
    • At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
    • You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
    • Now use your mouse to drag CFscript.txt on top of ComboFix.exe

      http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif

    • Follow the prompts.
    • When it finishes, a log will be produced named c:\combofix.txt
    • I will ask for this log below

    Note:

    Do not mouseclick combofix's window while it is running. That may cause it to stall.

    If after running Combofix you discover none of your programs will open up, and you recieve the following error: "Illegal operation attempted on a registry key that has been marked for deletion". Then the answer is to REBOOT the machine, and all will be corrected.


    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista or Windows7) Then attach the new C:\MGlogs.zip file that will be created by running this.

    I am seeking advice from a colleague regarding what was found with systemlook.
     
    Kestrel13!, Sep 19, 2011
    #19
  20. Kikicool

    Kikicool Private E-2

    When we got the computer, it came installed. I thought I got rid of it years ago. I guess not. I did a search for norton and symantec. They are running now. I searched for files or documents containing t hose words, full system so it could take a while. Not sure how to share but I'll figure it out.


    Done. Attached.



    Thank you very much! I wiill share my Norton/Symantec findings as soon as they're available.
     

    Attached Files:

    Last edited by a moderator: Sep 20, 2011
    Kikicool, Sep 20, 2011
    #20
  21. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    No offence, but the coloured text sends my eyes funny. :(
     
    Kestrel13!, Sep 20, 2011
    #21
  22. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Do you see this Symantec KB-DocID:2003093015493306 installed in add/remove programs? If so uninstall it. Then proceed with these steps.

    Please give the Norton Removal Tool (SymNRT) a run > reboot your machine and then run it again for good measure.
     
    Kestrel13!, Sep 20, 2011
    #22
  23. Kikicool

    Kikicool Private E-2

    None taken! Black from now on. :)
     
    Kikicool, Sep 20, 2011
    #23
  24. Kikicool

    Kikicool Private E-2

    There was nothing in the add/remove programs thing. I did the Norton Uninstall twice. Thanks!
     
    Kikicool, Sep 20, 2011
    #24
  25. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    OK then I am going to say unless you are having any actual malware problems at the moment then you can post in the software forum regarding what systemlook finds of Cyberdefender/Bearshare. Run this fix below to remove some and then you can run systemlook again the same way as before to see what's left. THEN you can show the people in software what is left and ask them how best to deal with it. I would personally leave it alone after running this small fix I give you but the choice is yours.

    Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

    Make sure that you tell me if you receive a success message about adding the above to the registry. If you do not get a success message, it definitely did not work.

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required (If we renamed it please rename it back to Combofix.exe.
      • "%userprofile%\Desktop\combofix" /uninstall
        • Notes: The space between the combofix" and the /uninstall, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    3. Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    7. Go to add/remove programs and uninstall HijackThis.
    8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
      related to MGtools and some other items from our cleaning procedures.
    9. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 7 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    10. After doing the above, you should work thru the below link:
     
    Kestrel13!, Sep 20, 2011
    #25
  26. Kikicool

    Kikicool Private E-2

    THANK YOU SO Much. :) You have been most helpful!!! I feel like my computer is already running SO much faster and that blasted bearshare smiling bear icon is nowhere to be seen. Mwahahahaha! I really appreciate it. Over to software I go!
     
    Kikicool, Sep 21, 2011
    #26
  27. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    You're welcome! Safe surfing! :)
     
    Kestrel13!, Sep 21, 2011
    #27

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds