12/06/2013 21:48:34, Error: ACPI [13] - : The embedded controller (EC) did not respond within the specified timeout period. This may indicate that there is an error in the EC hardware or firmware or that the BIOS is accessing the EC incorrectly. You should check with your computer manufacturer for an upgraded BIOS. In some situations, this error may cause the computer to function incorrectly.
Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!
NOTE: At the top of your post, click on the "Follow This Topic" Button, make sure that the "Receive notification" box is checked and that it is set to "Instantly" - This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.
NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.
NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.
Also, you asked how the machine was running (thank you), yes it is running fine -after I had removed the toolbars and search engine (conduit) things were normal from that point but my concerns were underlying issues so am pleased to have your support and guidance about removing anything else installed. The machine continues to run fine following the instructions you gave me to run the adware and junkware removal tools. Thank you.
These are programs that start up when you turn on your computer but don't need to be, any of these programs you can click on their icons (or start from the control panel) and start the program when you need it. By stopping these programs you will boot up faster and your computer will work faster.
The following procedures will implement some cleanup procedures to remove these tools. It will also reset your System Restore by flushing out previous restore points and create a new restore point. It will also remove all the backups our tools may have made.
CCleaner - This is a good program to clean out temp files, I would use this once a week or before any malware scan to remove unwanted temp files - It has a built in registry cleaner but I would leave that alone and not use any registry cleaner
totally free but for real-time protection you will have to pay a small one-time fee. We used this to help clean your computer and recomend keeping it and using often. (I have upgraded to the paid version of MBAM and I am glad I did)
Strong passwords: How to create and use them Then consider a password keeper, to keep all your passwords safe. KeePass is a small utility that allows you to manage all your passwords.
The other question I am asked all the time is "How can I prevent this from happening again." and the short answer to that is to be aware of what is out there and how to start spotting dangers.
There is no such thing as 'perfect security'. This applies to many things, not just computer systems. Using the above guide you should be able to take all the reasonable steps you can to prevent infection. However, the most important part of all this is you, the user. Surf sensibly and think before you download a file or click on a link. Take a few moments to assess the possible risks and you should be able to enjoy all the internet has to offer.
Also, I used the batch file to delete everything on my C: system drive but I kept the files on the K: drive and did not delete these as these are installers for programs that I may need. They 'live' on an external USB drive (the K: drive) and are not being run as they are installers so I would guess they are safe to leave there for now until I decide what to do with them later.
When I put ComboFix /Uninstall Windows reported it couldn't find it even though I had run it. I think this is a standalone program anyway so doesn't require an uninstall. I removed it from my downloads folder after using it. Thoughts?
I considered WinPatrol in your advice but since I already have Norton AND MalwareBytes running I am hesitant about installing yet another program as my impression from reading stuff around the web is that overprotection in this way can actually reduce the protection as the interactions between the various programs can make them run below optimum performance.
Norton, Malwarebytes Anti-malware and Winpatrol each do a different job that is why I think it is a good idea to have them, now if you were to have lets say Norton and McAfee that would be bad as they do the same job so they would fight with each other
In April 2009 Zango ceased trading after its banks foreclosed. However, As of April 2010[update], Hotbar, Seekmo, and ZangoCash, formerly owned by Zango, continue to operate as part of Pinball Corporation.
Zango's consumer website asserted that the company was "committed to creating a content economy built on a foundation of safe and ethical practices by protecting consumer privacy while offering a fulfilling and high-value content experience." It provided targeted advertising[1] in return for partner companies' content such as sports, comedy, dance, erotic videos, online games, and screensavers.[2] Warner Bros. and others had provided content, but WB terminated[3] its business relationship with Zango after concerns were raised that children viewing Warner Bros. content could be exposed to advertisements for pornography.[4]
StopBadware.org lists a number of undesirable behaviors associated with Zango Easy Messenger, including "behaves as spyware", "automatically runs on startup","displays pop-up advertisements", "installs adware", and "bundled software cannot be closed". The same site states, "We find that Zango Easy Messenger is not badware, although it does engage in behaviors that users should be aware of."[5]
Websense has a Zango-related security advisory dated November 2006, stating that "Websense Security Labs has discovered a number of user pages on the MySpace domain which have videos that look like they are from YouTube. The videos have an installer embedded within them for the Zango Cash Toolbar. When users click on the video, they are directed to a copy of the video, which is hosted on a site called 'Yootube.info.' ... the video downloads and attempts to install setup.exe from Zango Cash."[6]
A more detailed analysis of this attack, according to one website, is that "Zango continues numerous practices likely to confuse, deceive, or otherwise harm typical users as well as practices specifically contrary to Zango's obligations under its November 2006 settlement with the FTC." These include failure to include on-screen disclosure of material terms, widespread in-toolbar ads without labeling and hyperlinks, ads for "bogus sites that attempt to defraud users", and third party installations without disclosure.[7]
Zango software is listed as adware by Symantec.[8] Computer security company McAfee said in 2005 "this program may have legitimate uses", but described it as a "potentially unwanted program" and an "adware downloader."[9] Automated analysis by McAfee SiteAdvisor in May 2008 reports "629 red downloads" and that during testing, McAfee "found downloads on this site that some people consider adware, spyware or other potentially unwanted programs."[10]
Keith and Ken Smith, the CEO and CTO respectively, founded ePIPO in 1999.[11] It was one of the first "pay-to-surf" companies, following in the footsteps of AllAdvantage. This business model paid users a minimal amount to surf the Internet while running an application that showed banner ads. Users could also make money by referring new users.
After enjoying brief success, the pay-to-surf business model declined with the bursting of the dot-com bubble in 2001. The company, which changed its name to 180solutions, adjusted their technologies in several ways:
180solutions' software showed pop-up ads while a user was surfing the Internet. This software was often bundled with freeware which the user intentionally installed; since permission to install the 180solutions adware was typically hidden in an EULA, most users were unaware they were installing adware. In some cases 180solutions' software was installed as a standalone install. Using this method, an ActiveX prompt simply asked the user to install the software so that they could receive "comparison shopping advertisements." 180solutions contended that the value of the bundled software or the advertisements made up for the inconvenience of the pop-up ads. The value of this trade-off was contested by critics of the adware business model.
In 2004, Benjamin Edelman, assistant professor at Harvard Business School and spyware researcher, analyzed the network behavior of 180solutions applications and claimed they redirected commissions to themselves that were properly due to affiliates, and additionally caused merchants to pay commissions when affected users clicked on merchant sites directly.[12] During this time, 180solutions' applications were designed to be difficult to uninstall, requiring the user to download an additional uninstall application made by 180solutions or to use an adware removal tool. In 2005 the software uninstall was standardized to use Windows' "Add or Remove Programs" function, making it easy to uninstall.
In 2005, 180solutions implemented a number of initiatives to control the distribution of its software and eliminate non-consensual installs. In March, they acquired one of their distribution partners, a Canadian company called CDT (dba LoudCash, giving them direct visibility into and greater control of many of the formerly "third party" distributors. In June, 180solutions claimed to have re-notified users on its 20-million-user customer base, and implemented a program that notifies all users within 72 hours of install and re-notifies all users every 90 days thereafter. By August, they had filed suit against seven individuals alleged to have illegally distributed its software using a botnet. In November, 180solutions announced an ongoing partnership with the FBI in breaking up a botnet ring in the Netherlands. In December, the company ended distribution of the 180SearchAssistant and closed LoudCash, a remnant from the CDT acquisition.
13d16603cb