Virus - downloaded Uniblue Registry Booster

[Sissy Sniffen]

I appreciate your post, The Real Truth, but decided to work with Gerry on the
issue. I was concerned by the way your post was written at first, then Gerry
wrote to ignore it. I am confused at this point as to why anyone would want
to infect a computer like what happened to me. Then i ask for help and your
post was a little harsh at the end saying to ignore people listed below. Now
there seems to be a web-war between you all. Crazy if you ask me...i just
wanted a little advice.

Good luck to you in your future issues.

I have seen that before and can probably fix it but I will let the NON MVP
Gerry keep "guessing" at what may be wrong with your system. It's got
nothing to do with that link he posted. Good luck with your issue.


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

Gerry,

Level of security is "custom".

I forgot to mention that a new foler is created in MS Outlook called
"JYSW4DDDDDDDDDDDDDDDDFTR M9 KJF]DFRVCCDEDEJJJHUJGTFDM UETH"

Have you ever seen this before? I will look at the link you sent and did
ignore the post the RealTruth based on the way it was written. Thanks
though.

Sissy

This link gives a number of explanations:
http://www.eventid.net/display.asp?eventid=20&eventno=42&source=Print&phase=1

Remember Event Viewer error reports are only worth following up if they
repeat before and after the computer is restarted.

What level of Security do you have in Internet Explorer? In Internet
Explorer select Tools, Internet Options, Security?

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Sissy Sniffen wrote:
Here is another "warning" in the event viewer under System:

Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 20
Date: 4/19/2009
Time: 3:16:07 PM
User: NT AUTHORITY\SYSTEM
Computer: XPSWORK
Description:
Printer Driver Microsoft Office Document Image Writer Driver for
Windows NT x86 Version-3 was added or updated. Files:- mdigraph.dll,
mdiui.dll, mdiui.dll.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


:

Sissy

Was the restore point dated before installing Registry Booster 2009?

What errors, if any, are appearing in Event Viewer?

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and close
Event Viewer.Now start your message (email) and do a paste into the
body of the message. Make sure this is the first paste after exiting
from Event Viewer.

If you want to pursue Malware try malwarebytes.

Malwarebytes' Anti-Malware
1.32 -freeware (if you upgrade you pay).
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

Run Malwarebytes' in safe mode and turn off your current anti-virus
before you do to avoid a conflict. Disregard the invitation on the
web site regarding the Registry Optimiser -a Registry Optimiser is
not a helpful utility.




--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Sissy Sniffen wrote:
ABSOLUTELY! The first think i did was uninstall the program and
then, like I stated I restrored the computer to an earlier date to
try to fix the registry.

Any more "advanced" suggestions?

:

Sissy

Have you tried the simple remedy of uninstalling Registry Booster
2009?

http://www.downloadatoz.com/registrybooster-download/uninstall-registry-booster.html

This type of programme is not good for your computer as David has
said.


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Sissy Sniffen wrote:
I am running OS Win XP w/IE8. I recevied an email from WinZip
(which I recevied because i own a license) re: this Registry
Booster 2009 program. Thought I would try it--thought it was safe
because it came from WinZip. Downloaded free version and now have
a virus that i can not find which seems to live in every program I
use. Spybot and AVG does not recognize it as a virus. What the
virus does is types in the doucment i have open or in the search
box if i am on the internet, opens a new menu, logs me off then
back on, etc. (it is actually a little scary -- like my computer
has someone living in side of it)

I created a back up of my registry BEFORE downloading the program.
I restored my computer 2x; 1st to this date then to another random
one at least a week ago and still no help.

Any ideas?

Thank you in advance for any information you can give me.

 

[The Real Truth [MS MVP]]

That web war has been going on since 2005 it is nothing new, they are called
trolls.


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

I appreciate your post, The Real Truth, but decided to work with Gerry on
the
issue. I was concerned by the way your post was written at first, then
Gerry
wrote to ignore it. I am confused at this point as to why anyone would
want
to infect a computer like what happened to me. Then i ask for help and
your
post was a little harsh at the end saying to ignore people listed below.
Now
there seems to be a web-war between you all. Crazy if you ask me...i just
wanted a little advice.

Good luck to you in your future issues.

I have seen that before and can probably fix it but I will let the NON
MVP
Gerry keep "guessing" at what may be wrong with your system. It's got
nothing to do with that link he posted. Good luck with your issue.


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not
waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

Gerry,

Level of security is "custom".

I forgot to mention that a new foler is created in MS Outlook called
"JYSW4DDDDDDDDDDDDDDDDFTR M9 KJF]DFRVCCDEDEJJJHUJGTFDM UETH"

Have you ever seen this before? I will look at the link you sent and
did
ignore the post the RealTruth based on the way it was written. Thanks
though.

:

Sissy

This link gives a number of explanations:
http://www.eventid.net/display.asp?eventid=20&eventno=42&source=Print&phase=1

Remember Event Viewer error reports are only worth following up if
they
repeat before and after the computer is restarted.

What level of Security do you have in Internet Explorer? In Internet
Explorer select Tools, Internet Options, Security?

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Sissy Sniffen wrote:
Here is another "warning" in the event viewer under System:

Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 20
Date: 4/19/2009
Time: 3:16:07 PM
User: NT AUTHORITY\SYSTEM
Computer: XPSWORK
Description:
Printer Driver Microsoft Office Document Image Writer Driver for
Windows NT x86 Version-3 was added or updated. Files:- mdigraph.dll,
mdiui.dll, mdiui.dll.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


:

Sissy

Was the restore point dated before installing Registry Booster
2009?

What errors, if any, are appearing in Event Viewer?

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the
meaning
of the error, information regarding Event ID, Source and
Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and
close
Event Viewer.Now start your message (email) and do a paste into the
body of the message. Make sure this is the first paste after
exiting
from Event Viewer.

If you want to pursue Malware try malwarebytes.

Malwarebytes' Anti-Malware
1.32 -freeware (if you upgrade you pay).
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

Run Malwarebytes' in safe mode and turn off your current anti-virus
before you do to avoid a conflict. Disregard the invitation on the
web site regarding the Registry Optimiser -a Registry Optimiser is
not a helpful utility.




--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Sissy Sniffen wrote:
ABSOLUTELY! The first think i did was uninstall the program and
then, like I stated I restrored the computer to an earlier date to
try to fix the registry.

Any more "advanced" suggestions?

:

Sissy

Have you tried the simple remedy of uninstalling Registry
Booster
2009?

http://www.downloadatoz.com/registrybooster-download/uninstall-registry-booster.html

This type of programme is not good for your computer as David has
said.


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Sissy Sniffen wrote:
I am running OS Win XP w/IE8. I recevied an email from WinZip
(which I recevied because i own a license) re: this Registry
Booster 2009 program. Thought I would try it--thought it was
safe
because it came from WinZip. Downloaded free version and now
have
a virus that i can not find which seems to live in every program
I
use. Spybot and AVG does not recognize it as a virus. What the
virus does is types in the doucment i have open or in the search
box if i am on the internet, opens a new menu, logs me off then
back on, etc. (it is actually a little scary -- like my computer
has someone living in side of it)

I created a back up of my registry BEFORE downloading the
program.
I restored my computer 2x; 1st to this date then to another
random
one at least a week ago and still no help.

Any ideas?

Thank you in advance for any information you can give me.

 

[Buffalo]

I appreciate your post, The Real Truth, but decided to work with
Gerry on the issue. I was concerned by the way your post was written
at first, then Gerry wrote to ignore it. I am confused at this point
as to why anyone would want to infect a computer like what happened
to me. Then i ask for help and your post was a little harsh at the
end saying to ignore people listed below. Now there seems to be a
web-war between you all. Crazy if you ask me...i just wanted a
little advice.

Good luck to you in your future issues.

Oh, what the hell!
Just do an image of your computer and try The Real Truth's solution and then
post back the results in this NewGroup.
If it works, all the better.
No, I'm not taking any odds.
Buffalo

 

[Unknown]

Please wipe your mouth. There is still some bullshit around your lips.

 

[Unknown]

But, YOU are the troll!

That web war has been going on since 2005 it is nothing new, they are
called trolls.


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not
waste your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

I appreciate your post, The Real Truth, but decided to work with Gerry on
the
issue. I was concerned by the way your post was written at first, then
Gerry
wrote to ignore it. I am confused at this point as to why anyone would
want
to infect a computer like what happened to me. Then i ask for help and
your
post was a little harsh at the end saying to ignore people listed below.
Now
there seems to be a web-war between you all. Crazy if you ask me...i
just
wanted a little advice.

Good luck to you in your future issues.

I have seen that before and can probably fix it but I will let the NON
MVP
Gerry keep "guessing" at what may be wrong with your system. It's got
nothing to do with that link he posted. Good luck with your issue.


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not
waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.




message
Gerry,

Level of security is "custom".

I forgot to mention that a new foler is created in MS Outlook called
"JYSW4DDDDDDDDDDDDDDDDFTR M9 KJF]DFRVCCDEDEJJJHUJGTFDM UETH"

Have you ever seen this before? I will look at the link you sent and
did
ignore the post the RealTruth based on the way it was written. Thanks
though.

:

Sissy

This link gives a number of explanations:
http://www.eventid.net/display.asp?eventid=20&eventno=42&source=Print&phase=1

Remember Event Viewer error reports are only worth following up if
they
repeat before and after the computer is restarted.

What level of Security do you have in Internet Explorer? In Internet
Explorer select Tools, Internet Options, Security?

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Sissy Sniffen wrote:
Here is another "warning" in the event viewer under System:

Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 20
Date: 4/19/2009
Time: 3:16:07 PM
User: NT AUTHORITY\SYSTEM
Computer: XPSWORK
Description:
Printer Driver Microsoft Office Document Image Writer Driver for
Windows NT x86 Version-3 was added or updated. Files:-
mdigraph.dll,
mdiui.dll, mdiui.dll.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


:

Sissy

Was the restore point dated before installing Registry Booster
2009?

What errors, if any, are appearing in Event Viewer?

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the
meaning
of the error, information regarding Event ID, Source and
Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and
close
Event Viewer.Now start your message (email) and do a paste into
the
body of the message. Make sure this is the first paste after
exiting
from Event Viewer.

If you want to pursue Malware try malwarebytes.

Malwarebytes' Anti-Malware
1.32 -freeware (if you upgrade you pay).
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

Run Malwarebytes' in safe mode and turn off your current
anti-virus
before you do to avoid a conflict. Disregard the invitation on the
web site regarding the Registry Optimiser -a Registry Optimiser is
not a helpful utility.




--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Sissy Sniffen wrote:
ABSOLUTELY! The first think i did was uninstall the program and
then, like I stated I restrored the computer to an earlier date
to
try to fix the registry.

Any more "advanced" suggestions?

:

Sissy

Have you tried the simple remedy of uninstalling Registry
Booster
2009?

http://www.downloadatoz.com/registrybooster-download/uninstall-registry-booster.html

This type of programme is not good for your computer as David
has
said.


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Sissy Sniffen wrote:
I am running OS Win XP w/IE8. I recevied an email from WinZip
(which I recevied because i own a license) re: this Registry
Booster 2009 program. Thought I would try it--thought it was
safe
because it came from WinZip. Downloaded free version and now
have
a virus that i can not find which seems to live in every
program I
use. Spybot and AVG does not recognize it as a virus. What
the
virus does is types in the doucment i have open or in the
search
box if i am on the internet, opens a new menu, logs me off then
back on, etc. (it is actually a little scary -- like my
computer
has someone living in side of it)

I created a back up of my registry BEFORE downloading the
program.
I restored my computer 2x; 1st to this date then to another
random
one at least a week ago and still no help.

Any ideas?

Thank you in advance for any information you can give me.

 

[yogi]

Thanks Buffalo for the response.

Yes, I did uninstall the program from the control panel and did not just
delete it. i do have MBAM installed, have run it and nothing was found.

i believe the problem is in the registry, just don't know how to fix it.

The lady stated in the original post that she made a backup of the
registry before installing the registry booster program, now if the
program altered the registry and the lady thinks that the problem is
still in the registry, would it do any harm to launch that registry
backup and put the registry back the way it was.

Cheers

 

[Twayne]

Said the troll, about a troll, to a troll. Other than occasional comedic
entertainment both of you are a total waste of skin and water.

But, YOU are the troll!

 

[Mott the Hoople]

Said the troll, about a troll, to a valuable contributor to this newsgroup.

and put to pen by the sock puppet of patrick christopher butts.
butts is as valuable as cat pee. whereever it is it's a mess and its
smells.

who are you trying to fool butts?
we all know who you are, what you are and where you are.

we know your tricks, your games, and your style.

troll buster -- busted for what it is. Just another one of butts' many
sock puppets.

by the way, why is brian so much better looking than you?

 

[Leythos]

Said the troll, about a troll, to a valuable contributor to this newsgroup.

Butts, calling yourself a valuable contributor is like Dalmer calling
himself a valuable food critic.

 

[Unknown]

I really must admit the comment "The information I post has been verified by
me and is authentic" deserves roaring laughter.

 

[Unknown]

Why are you trolling?

Said the troll, about a troll, to a troll. Other than occasional comedic
entertainment both of you are a total waste of skin and water.

But, YOU are the troll!

 

[hchu]

You may just have the Voice Recognition turned on. That's why when you open a
document, and when you talk or when there is background noise, characters
typed in by itself.

 

[Tim]

I downloaded and ran Uniblue Registry Booster... realized what a scam it was,
uninstalled it. There doesn't seem to be any files left, but it was still running in
the Start Up file in msconfig. Is this a registry key that has to be deleted?
Thanks
Tim

 

[Bill in Co.]

The simplest and safest solution to clean up any possible mess left behind
would be to run System Restore to a prior checkpoint.

 

[Barry Schwarz]

Run my diagnostic tool called whatslivern. That file after a few seconds,
when complete, will generate a log file. That log file will be saved in the
same directory you ran the program from, using the email link at the bottom
of my page send me a copy of that log file. http://www.ms-mvp.org/

This not the MVP site despite its fake logos.

The correct MVP site is http://www.mvps.org/