woodshopfun

Great news! I think we finally have my daughter's computer back on line. Not sure what locked me out, but with the recovery disks, I was able to get back in, and everything seems to be working great. No viruses detected. A big thanks to flashh4!!!

yes, she is using Norton, do I need to disable it?

OTL Extras logfile created on: 12/7/2013 10:59:12 AM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kristi\Desktop 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16736) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 1.60 Gb Total Physical Memory | 0.47 Gb Available Physical Memory | 29.54% Memory free 4.35 Gb Paging File | 2.90 Gb Available in Paging File | 66.65% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Win

OTL logfile created on: 12/7/2013 10:59:12 AM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kristi\Desktop 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16736) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 1.60 Gb Total Physical Memory | 0.47 Gb Available Physical Memory | 29.54% Memory free 4.35 Gb Paging File | 2.90 Gb Available in Paging File | 66.65% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows |

. UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2012-11-20.01) . Microsoft Windows 8 Boot Device: \Device\HarddiskVolume2 Install Date: 11/22/2012 11:34:29 PM System Uptime: 12/7/2013 9:05:01 AM (1 hours ago) . Motherboard: Hewlett-Packard | | 169A Processor: AMD C-60 APU with Radeon HD Graphics | Socket FT1 | 1000/100mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 276 GiB total, 223.98 GiB free. D: is FIXED (NTFS) - 21 GiB total, 2.618 GiB free. E: is CDROM () . ==== Disabled Device Manager Items =========

DDS (Ver_2012-11-20.01) - NTFS_AMD64 Internet Explorer: 10.0.9200.16537 Run by Kristi at 10:13:04 on 2013-12-07 Microsoft Windows 8 6.2.9200.0.1252.1.1033.18.1634.262 [GMT -7:00] . AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Norton AntiVirus Online *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Norton AntiVirus Online *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} . ============== Running Processes =============== . C:\Windows\system32\svchost.exe -k Dc

So, on to the DDS?

Results of screen317's Security Check version 0.99.77 x64 (UAC is enabled) Internet Explorer 10 Out of date! ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! Windows Defender Norton AntiVirus Online WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware version 1.75.0.1300 Mozilla Firefox 24.0 Firefox out of Date! ````````Process Check: objlist.exe by Laurent```````` Norton ccSvcHst.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes An

Malwarebytes Anti-Malware (Trial) 1.75.0.1300 www.malwarebytes.org Database version: v2013.12.07.04 Windows 8 x64 NTFS Internet Explorer 10.0.9200.16736 Kristi :: JENSEN [administrator] Protection: Enabled 12/7/2013 8:50:28 AM mbam-log-2013-12-07 (08-50-28).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 209144 Time elapsed: 10 minute(s), 48 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items d

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.8 (11.05.2013:1) OS: Windows 8 x64 Ran by Kristi on Sun 12/01/2013 at 21:20:33.13 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-731434280-73576831-2629088662-1002\Software\sweetim S

# AdwCleaner v3.014 - Report created 01/12/2013 at 19:28:50 # Updated 01/12/2013 by Xplode # Operating System : Windows 8 (64 bits) # Username : Kristi - JENSEN # Running from : C:\Users\Kristi\Desktop\adwcleaner.exe # Option : Clean ***** [ Services ] ***** Service Deleted : DefaultTabUpdate ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\AVG SafeGuard toolbar Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\ProgramData\Iminent Folder Deleted : C:\ProgramData\Tarma Installer Folder Deleted : C:\Program Files (x86)\AVG SafeGuard toolbar Folder Deleted :

Not sure what all is not good, my daughter tried to download the generic Office, and said her computer isn't working correctly now.

All processes killed ========== OTL ========== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\S

OTL Extras logfile created on: 11/6/2013 7:59:35 PM - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Chris\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 7.75 Gb Total Physical Memory | 5.79 Gb Available Physical Memory | 74.66% Memory free 15.50 Gb Paging File | 13.47 Gb Available in Paging File | 86.90% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %Syst

All processes killed Error: Unable to interpret <:OTLIE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}> in the current context! Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox> in the current context! Error: Unable to interpret <IE - HKLM\..\SearchScopes,DefaultScope => in the current context! Error: Unable to interpret <IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC>