Jump to content

Enigma spyhunter problems

Harrie1
 Share

Recommended Posts

Maniac

Maniac

Posted
Posted

Please download SystemLook from one of the links below and save it to your Desktop.

Download Mirror #1

Download Mirror #2

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:

    :filefind*spyhunter**enigma*:folderfind*spyhunter**enigma*:regfind*spyhunter**enigma*
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
Link to post
Share on other sites
Harrie1

Harrie1

Posted
  • Author
Posted

I downloaded the file and runned it

Here is the info:

SystemLook 30.07.11 by jpshortstuff

Log created at 19:49 on 25/03/2014 by Harrie_Terhorst

Administrator - Elevation successful

WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.

========== filefind ==========

Searching for "*spyhunter*"

No files found.

Searching for "*enigma*"

No files found.

========== folderfind ==========

Searching for "*spyhunter*"

No folders found.

Searching for "*enigma*"

No folders found.

========== regfind ==========

Searching for "*spyhunter*"

No data found.

Searching for "*enigma*"

No data found.

-= EOF =-

Link to post
Share on other sites
Harrie1

Harrie1

Posted
  • Author
Posted

Here is the output from the look_x64.exe:

 

SystemLook 30.07.11 by jpshortstuff
Log created at 21:29 on 29/03/2014 by Harrie_Terhorst
Administrator - Elevation successful
 
========== filefind ==========
 
Searching for "*spyhunter*"
No files found.
 
Searching for "*enigma*"
No files found.
 
========== folderfind ==========
 
Searching for "*spyhunter*"
No folders found.
 
Searching for "*enigma*"
No folders found.
 
========== regfind ==========
 
Searching for "*spyhunter*"
No data found.
 
Searching for "*enigma*"
No data found.
 
-= EOF =-
Link to post
Share on other sites
Harrie1

Harrie1

Posted
  • Author
Posted

I started the look_x64 again without the ** in the name and then I see the following info:

 

SystemLook 30.07.11 by jpshortstuff
Log created at 21:49 on 29/03/2014 by Harrie_Terhorst
Administrator - Elevation successful
 
========== filefind ==========
 
Searching for "Spyhunter"
No files found.
 
Searching for "Enigma"
No files found.
 
========== folderfind ==========
 
Searching for "Spyhunter"
No folders found.
 
Searching for "Enigma"
No folders found.
 
========== regfind ==========
 
Searching for "Spyhunter"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs]
[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdcd-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]
"Element"="SpyHunter Rescue"
[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdce-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]
"Element"="SpyHunter Rescue"
[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdcf-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]
"Element"="SpyHunter Rescue"
[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdd0-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]
"Element"="SpyHunter Rescue"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\SpyHunter4.exe]
[HKEY_USERS\S-1-5-21-231642352-623416637-1905510808-1001\Software\Microsoft\Internet Explorer\TypedURLs]
 
Searching for "Enigma"
No data found.
 
-= EOF =-
Link to post
Share on other sites
Maniac

Maniac

Posted
Posted

Download attached fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST/FRST64 and press the Fix button just once and wait.

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

fixlist.txt

Link to post
Share on other sites
Harrie1

Harrie1

Posted
  • Author
Posted

I run FRST64 and pushed the Fix button.

Here is the log: fixlog.txt:

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Harrie_Terhorst at 2014-03-30 21:21:13 Run:1
Running from C:\Users\Harrie_Terhorst\Downloads
Boot Mode: Normal
==============================================
 
Content of fixlist:
*****************
Start
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs]
"url11"=-
[HKEY_USERS\S-1-5-21-231642352-623416637-1905510808-1001\Software\Microsoft\Internet Explorer\TypedURLs]
"url11"=-
[-HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdcd-6dc0-11e2-be6f-cc4b7ed85f80}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\SpyHunter4.exe]
End
 
*****************
 
 
==== End of Fixlog ====
Link to post
Share on other sites
Maniac

Maniac

Posted
Posted

Note: Please do not run this tool without special supervision and instructions of someone authorized to do so. Otherwise, you could end up with serious problems. For more details, read this article: ComboFix usage, Questions, Help? - Look here

Please visit this webpage and read the ComboFix User's Guide:

  • Once you've read the article and are ready to use the program you can download it directly from the link below.
  • Important! - Please make sure you save combofix to your desktop and do not run it from your browser
  • Direct download link for: ComboFix.exe
  • Please make sure you disable your security applications before running ComboFix.
  • Once Combofix has completed it will produce and open a log file. Please be patient as it can take some time to load.
  • Please copy/paste the contents or attach that log file to your next reply.
  • If needed the file can be located here: C:\combofix.txt
  • NOTE: If you receive the message "illegal operation has been attempted on a registry key that has been marked for deletion", just reboot the computer.
Link to post
Share on other sites
Maniac

Maniac

Posted
Posted

Open notepad and copy and paste next present in the quotebox below in it (don't forget to copy and paste REGEDIT4):

REGEDIT4[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs]"url11"=-[HKEY_USERS\S-1-5-21-231642352-623416637-1905510808-1001\Software\Microsoft\Internet Explorer\TypedURLs]"url11"=-[-HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdcd-6dc0-11e2-be6f-cc4b7ed85f80}][-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\SpyHunter4.exe]
Save this as fix.reg Choose to save as *all files and place it on your desktop.

It should look like this: reg.gif

Doubleclick on it and when it asks you if you want to merge the contents to the registry, click yes/ok.

Finally, reboot your PC. Let me know how are things then.

Link to post
Share on other sites
Harrie1

Harrie1

Posted
  • Author
Posted

I runned the fix with the fix.reg file

Then I rebooted the PC but I still see the messages.

 

I checked with SystemLook_64.exe the sytem with checking again on the names spyhunter and enigma

Here is the output from SystemLook.txt:

 

SystemLook 30.07.11 by jpshortstuff
Log created at 20:02 on 02/04/2014 by Harrie_Terhorst
Administrator - Elevation successful
 
========== filefind ==========
 
Searching for "spyhunter"
No files found.
 
Searching for "enigma"
No files found.
 
========== folderfind ==========
 
Searching for "spyhunter"
No folders found.
 
Searching for "enigma"
No folders found.
 
========== regfind ==========
 
Searching for "spyhunter"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs]
[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdcd-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]
"Element"="SpyHunter Rescue"
[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdce-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]
"Element"="SpyHunter Rescue"
[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdcf-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]
"Element"="SpyHunter Rescue"
[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdd0-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]
"Element"="SpyHunter Rescue"
[HKEY_USERS\S-1-5-21-231642352-623416637-1905510808-1001\Software\Microsoft\Internet Explorer\TypedURLs]
 
Searching for "enigma"
No data found.
 
-= EOF =-
Link to post
Share on other sites
Maniac

Maniac

Posted
Posted

Try again, but this time with this script:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs]

"url11"=-

[HKEY_USERS\S-1-5-21-231642352-623416637-1905510808-1001\Software\Microsoft\Internet Explorer\TypedURLs]

"url11"=-

[-HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdcd-6dc0-11e2-be6f-cc4b7ed85f80}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\SpyHunter4.exe]

Link to post
Share on other sites
Harrie1

Harrie1

Posted
  • Author
Posted

I runned the fix with the new fix.reg file


Then I rebooted the PC but I still see the messages.


 


I checked with SystemLook_64.exe the sytem with checking again on the names spyhunter and enigma


Here is the output from SystemLook.txt:


 


SystemLook 30.07.11 by jpshortstuff

Log created at 14:36 on 05/04/2014 by Harrie_Terhorst

Administrator - Elevation successful

 

========== filefind ==========

 

Searching for "spyhunter"

No files found.

 

Searching for "enigma"

No files found.

 

========== folderfind ==========

 

Searching for "spyhunter"

No folders found.

 

Searching for "enigma"

No folders found.

 

========== regfind ==========

 

Searching for "spyhunter"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs]


[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdcd-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]

"Element"="SpyHunter Rescue"

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdce-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]

"Element"="SpyHunter Rescue"

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdcf-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]

"Element"="SpyHunter Rescue"

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{edd9bdd0-6dc0-11e2-be6f-cc4b7ed85f80}\Elements\12000004]

"Element"="SpyHunter Rescue"

[HKEY_USERS\S-1-5-21-231642352-623416637-1905510808-1001\Software\Microsoft\Internet Explorer\TypedURLs]


 

Searching for "enigma"

No data found.

 

-= EOF =-

Link to post
Share on other sites
  • 2 weeks later...
  • 3 weeks later...
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.