Sheryl

Thank you again. And I will tell everyone I know about BestTechie and especially you. ; )

Thank you sooo much. My computer hasn't been running "normally" for over a year. It is now running better than normal. I have not completed all of these steps that you have recommended yet, but I will as soon as I complete this post. I will definately tell everyone about your service. I wish I would have known about you sooner. You are a "Godsend". Thank you, again. ; ) P.S. Could you please bump your post on the Lovell Classifieds? I have been unable to locate it again. ; ) Thank you again.

Okay. I just finished running that Microsoft scan. It showed that it did not detect any viruses or anything on the system. I also restarted my computer and that pop up of the worm has not popped up again.

I just saw this one. Let me try it now.

It seems to be running better, however I am still getting the same two pop ups. When I close the first one, the pop up of the worm comes up. Everytime upon restart.

Select the option YES, I accept the Terms of Use then click on: * When prompted allow the Add-On/Active X to install. * Make sure that the option Remove found threats is checked, and the option Scan archives is checked. * Now click on Advanced Settings and select the following: o Scan for potentially unwanted applications o Scan for potentially unsafe applications o Enable Anti-Stealth Technology * Now click on: # The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection. # When comp

C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe a variant of Win32/HiddenStart.A application cleaned by deleting - quarantined C:\Program Files (x86)\RealArcade\Installer\bin\OCSetupHlp.dll Win32/OpenCandy application cleaned by deleting - quarantined C:\Users\guerajasso\AppData\Local\Temp\vlsuho12a8uu6-10083.tmp Win32/Simda.P trojan cleaned by deleting - quarantined C:\Users\Public\Downloads\10DaysUnderTheSea-dm.exe a variant of Win32/Adware.Trymedia.A application cleaned by deleting - quarantined C:\Users\Public\Downloads\10Talismans-dm[1].exe a variant of Wi

Select the option YES, I accept the Terms of Use then click on: * When prompted allow the Add-On/Active X to install. * Make sure that the option Remove found threats is checked, and the option Scan archives is checked. * Now click on Advanced Settings and select the following: o Scan for potentially unwanted applications o Scan for potentially unsafe applications o Enable Anti-Stealth Technology * Now click on: # The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection. # When comp

Select the option YES, I accept the Terms of Use then click on: * When prompted allow the Add-On/Active X to install. * Make sure that the option Remove found threats is checked, and the option Scan archives is checked. * Now click on Advanced Settings and select the following: o Scan for potentially unwanted applications o Scan for potentially unsafe applications o Enable Anti-Stealth Technology * Now click on: # The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection. # When comp

Here are the results.... All processes killed Error: Unable to interpret <:OTLIE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRCIE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRCIE - HKU\S-1-5-21-2943996986-3391541806-3619402730-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E14

Okay. I will run this now.

Okay. Here are the results from that last scan.... # AdwCleaner v2.301 - Logfile created 05/17/2013 at 08:16:16 # Updated 16/05/2013 by Xplode # Operating system : Windows Vista Ultimate Service Pack 2 (64 bits) # User : guerajasso - GUERAJASSO-PC # Boot Mode : Normal # Running from : C:\Users\guerajasso\Desktop\adwcleaner.exe # Option [Delete] ***** [services] ***** ***** [Files / Folders] ***** Deleted on reboot : C:\Program Files (x86)\Common Files\ParetoLogic Deleted on reboot : C:\Program Files (x86)\ImTranslator_Pro Deleted on reboot : C:\ProgramData\ParetoLogic Deleted on reboot : C:\

Okay. I will do this now.

No. I haven't used it for a long time. About 3 years. It can go.

Okay.

Here are the results of the latest scan.... # AdwCleaner v2.301 - Logfile created 05/17/2013 at 07:46:33 # Updated 16/05/2013 by Xplode # Operating system : Windows Vista Ultimate Service Pack 2 (64 bits) # User : guerajasso - GUERAJASSO-PC # Boot Mode : Normal # Running from : C:\Users\guerajasso\Desktop\adwcleaner.exe # Option [search] ***** [services] ***** ***** [Files / Folders] ***** Folder Found : C:\Program Files (x86)\Common Files\ParetoLogic Folder Found : C:\Program Files (x86)\ImTranslator_Pro Folder Found : C:\ProgramData\ParetoLogic Folder Found : C:\Users\guerajasso\AppData\Loc

I'm sorry. I did not receive this last night. I will now run this latest scan as requested.

These are the results of my last scan of Malwarebytes.... Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Database version: v2013.05.16.09 Windows Vista Service Pack 2 x64 NTFS Internet Explorer 9.0.8112.16421 guerajasso :: GUERAJASSO-PC [administrator] 5/16/2013 2:28:54 PM mbam-log-2013-05-16 (14-28-54).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 228380 Time elapsed: 16 minute(s), 23 second(s) Memory Processes Detected: 0 (No malicious items

OTL logfile created on: 5/16/2013 2:05:09 PM - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\guerajasso\Desktop 64bit-Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.99 Gb Total Physical Memory | 2.25 Gb Available Physical Memory | 56.41% Memory free 8.17 Gb Paging File | 5.77 Gb Available in Paging File | 70.59% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %Sys

I am running on McAfee. It is running faster already. ; )

OTL Extras logfile created on: 5/16/2013 1:23:19 PM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\guerajasso\Desktop 64bit-Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.99 Gb Total Physical Memory | 2.28 Gb Available Physical Memory | 57.20% Memory free 8.17 Gb Paging File | 5.82 Gb Available in Paging File | 71.18% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C:

After this OTC scan, I will run the previous one again. I did press rempve selected. This first time, I might have forgotten, but this last time... I did press it. I wil run again and press remove selected again. I hope it works this time.

Okay. I am running the Malwarebytes again now. Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Database version: v2013.05.16.06 Windows Vista Service Pack 2 x64 NTFS Internet Explorer 9.0.8112.16421 guerajasso :: GUERAJASSO-PC [administrator] 5/16/2013 10:50:59 AM MBAM-log-2013-05-16 (11-19-09).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 230080 Time elapsed: 23 minute(s), 55 second(s) Memory Processes Detected: 0 (No malicious items detecte

Okay. I am running the Malwarebytes again now. Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Database version: v2013.05.16.06 Windows Vista Service Pack 2 x64 NTFS Internet Explorer 9.0.8112.16421 guerajasso :: GUERAJASSO-PC [administrator] 5/16/2013 10:50:59 AM MBAM-log-2013-05-16 (11-19-09).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 230080 Time elapsed: 23 minute(s), 55 second(s) Memory Processes Detected: 0 (No malicious items detecte