• Content count

  • Joined

  • Last visited

About GuiltySpark

  • Rank
    Volunteer Mod
  • Birthday

Contact Methods

  • Website URL

Profile Information

  • Gender
  • Location
    The Space Between Two Points
  • Interests

Recent Profile Visitors

88199 profile views
  1. No sarcasm, just surprised they would use Xvirus engine over a long term tried and trusted one. Not to mention Xvirus isn't actually an Antivirus, interesting to see if Santos builds it on C++ instead of .NET Framework he said he was looking into that and creating a portable version so time will tell.
  2. Mouse over the link and see what the link address actually consists of, these are usually a completely different address. Check the email headers to see where they spawned from.
  3. No worries thread closed.
  4. Hi bluebear, Selecting the thumbs up / down in system investigator will have no affect on the sound change. What OS are you using? Have you checked that the sound controls aren't muted?
  5. If Norton flagged a file then it is a Norton issue not SAS, you should speak to Norton.
  6. Really? Opswat is using Xvirus??? Surprising!
  7. Please let us know how you get on whether it be in a PM or in a thread as I am intrigued to what is on the system causing the issue.
  8. Well the fixlog shows that certain elements were restored and the others just were no longer found on the system, no need to run the FRST again. I honestly think that you will have to take the computer to a repair shop or tech friend to look at as it's difficult to know what's happening without seeing it. Just make sure they are a legit tech, oh and if they say FRST is malware, They are not a tech! The reason I say take it to a repair shop is because you have a serious problem with OS it may be corrupted to the point it needs repairing with an install disc or hardware may have to be checked over.
  9. Please post that Fixlog file
  10. A backup image of your Operating System. Do you make back ups?
  11. It shouldn't be taking this long however if it is deleting temp files then it's not yet halfway through so just let it keep running for now as you could have tons of temp files to remove. Out of interest do you have a backup image?
  12. OK. Create a folder on your desktop named frst. Open the folder and drag the FRST64 application into it, Drag the 2 txt files Frst.txt and Additional.txt (or whatever they are called) into the Folder. Drag the Fixlist.txt into the Folder. Open the frst64 application and select Fix.
  13. Is the FRST64 a folder or application?
  14. Hi Angela Have been busy (it's not my day job) Open up Notepad and copy and paste this fixlist; Start CreateRestorePoint: CloseProcesses: Emptytemp: HKU\S-1-5-18\...\Run: [orakutt] => rundll32 "C:\windows\system32\config\systemprofile\AppData\Local\orakutt.dll",orakutt <===== ATTENTION HKU\S-1-5-18\...409d6c4515e9\InprocServer32: [Default-shell32] SHELL32.dll ATTENTION Winsock: Catalog5 01 C:\windows\SysWOW64\mswsock.dll [231424 2016-05-11] (Microsoft Corporation) ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Winsock: Catalog5-x64 01 C:\Windows\System32\mswsock.dll [327168 2016-05-11] (Microsoft Corporation) ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\S-1-5-21-2526227594-993951278-2018043271-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp:// S3 MpsSvc; . [0 2016-12-27] () <==== ATTENTION (zero byte File/Folder) CMD: ipconfig /flushdns End Save this as Fixlist and put it in the FRST folder. Open FRST and select Fix. The scan will do it's thing. We will come back to Avira later but please don't run the Speedup / Optimize option(s) as they are not necessary.
  15. If you are able to.... Try to download Farbar choose the correct version 32bit or 64bit for your machine. Run a scan and attach the log files here. Also download Avira free and install via Custom Install should it ask, you only need to use the AV if it asks to install or setup mobile scanner or a online vault file, backup etc select No or uncheck those.