Just found out upload problem definitely is not YOURS but a problem HERE at the forum. That said, we don't want uploads anyway for logs from infected computers we want copy/paste from WordPad.
Now, your log is still showing listings for Symantec in auto-starts, these;
O4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')
You are also showing at least one for sure instance of malware;
O4 - HKUS\S-1-5-18\..\Run: [Yksquaio] C:\WINDOWS\System32\??chost.exe (User 'SYSTEM') which is PurityScan which is an adware program that downloads and displays advertisements on a computer. Plus, by their own admission, when PurityScan is installed, you also get the "OIN client software", which will periodically display advertisements (popups) and monitor the websites you visit while connected to the Internet.
You really need to do a search on your computer, first of all for Symantec and delete all those files you find.
Next I would like you to update MBA-M. Then close the program, shut down and reboot to Safe Mode.
Then look in Add/Remove for Purity Scan and for OIN if you find either of those listed, uninstall them.
Then, still in Safe Mode, run a Full System scan with MBA-M. Let it REMOVE everything it finds.
Reboot to normal mode. Run a new HJT scan.
Post back here with that new log and also the log from MBA-M


Reply With Quote