BigKiwi

Mr C Once again, you're a star! I will have to go through my other laptop as well, but i;ll give you a few days break first. My other laptop is Windows 8 which drives me nuts! Talk again soon and thanks so much Big Kiwi

Should that have it all covered Mr C? I have a couple of questions....whom ever hacked my yahoo email has totally cleared all mail history and contacts. Is there any way of restoring my contacts at least? They also hacked my Facebook. Apart from changing passwords, do you recommend anything else?

Updates installed Mr C. anything next?

Do you want me to install the 14 Windows updates?

Mr C I updated Adobe. When I went to delete chrome by pressing "Y" in the black box, it stated "Access to the path 'chrome d11' is denied. Make sense to you?

Hi Mr C See attached and below Results of screen317's Security Check version 0.99.63 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 8 Out of date! ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! Microsoft Security Essentials Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware version 1.75.0.1300 Java 7 Update 21 Adobe Flash Player 11.7.700.202 Adobe Reader 10.1.7 Adobe Reader out of Date! Mozilla Firefox (20.0.1) Google Chrome 26.0.1410.43 Google Chrome 26.0.1410.64 ````````Process Check: objlist.exe by Laurent```````` Norton ccSvcHst.exe Microsoft Security Essentials MSMpEng.exe Microsoft Security Essentials msseces.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: 0% ````````````````````End of Log`````````````````````` AdwCleanerS1.txt

Mr C See attached Thanks AdwCleanerR1.txt

Good to hear from you again Mr C. Attached is the Combo fix report. Do you want me to re-activate my Microsoft Security and Malware Bytes Pro now? Combofix.txt

I have also checked windows updates and there are 14 to be updated. I will only do so once i hear from you. Thanks for your time Mr C

Hi Mr C Nothing came up, see attached. Anything else do do you think? system-log.txt

Sorry Mr C I am not sure where the attach button has gone, but here it is. RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy mail : tigzyRK<at>gmail<dot>com Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/ Website : http://tigzy.geekstogo.com/roguekiller.php Blog : http://tigzyrk.blogspot.com/ Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version Started in : Normal mode User : Big Jim [Admin rights] Mode : Scan -- Date : 05/16/2013 11:33:27 | ARK || FAK || MBR | ¤¤¤ Bad processes : 0 ¤¤¤ ¤¤¤ Registry Entries : 5 ¤¤¤ [HJPOL] HKCU\[...]\System : disableregistrytools (0) -> FOUND [HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> FOUND [HJPOL] HKLM\[...]\Wow6432Node\System : DisableRegistryTools (0) -> FOUND [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND ¤¤¤ Particular Files / Folders: ¤¤¤ ¤¤¤ Driver : [NOT LOADED] ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ --> C:\windows\system32\drivers\etc\hosts 127.0.0.1 localhost ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: Hitachi HTS547564A9E384 +++++ --- User --- [MBR] f2d7565448f25829d508bcb4f28c0973 [bSP] 25a3e70334ae811253a170a7cd4edaa0 : Windows Vista MBR Code Partition table: 0 - [ACTIVE] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 1500 Mo 1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 3074048 | Size: 594862 Mo 2 - [XXXXXX] NTFS (0x17) [HIDDEN!] Offset (sectors): 1221351424 | Size: 14117 Mo User = LL1 ... OK! User = LL2 ... OK! Finished : << RKreport[1]_S_05162013_02d1133.txt >> RKreport[1]_S_05162013_02d1133.txt

Hi there Last time Mr C was great and now I need help again. A nigerian based person(s) has hacked my facebook and yahoo email posing as me and asking for money off friends. It looks as though Facebook contact was made to friends even after I had changed the password this morning. Help please as I'm no computer wizz! Thank you! dds.txt attach.txt

MrC On your 'Preventative Maintenance' link, what do mean by "keep the registry backed up"? BK