• Content Count

  • Joined

  • Last visited

Community Reputation

0 Neutral

About Joy128

  • Rank
  1. I hear you! You mentioned restoring back to kies?? How do I do that also you mentioned configure windows explorer to show files?? Also you suggested I remove some of the programs that are suseptibale java, QuickTime, itibiti and search tool bar are any of those more complicated than just uninstalling?? Thanks much
  2. I appreciate your help!
  3. Cecilia, a whole two rows of icons dissapeared. I am following your lead. I am not doing anything with malware.
  4. These are the things malwarebites customer support wants me to delete ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ start C:\Users\JOY\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp_vvijb.dll C:\Users\JOY\AppData\Local\Temp\ffmpeg15.exe C:\Users\JOY\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\JOY\AppData\Local\Temp\jre-7u40-windows-i586-iftw.exe C:\Users\JOY\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe C:\Users\JOY\AppData\Local\Temp\jre-8u65-windows-au.exe C:\Users\JOY\AppData\Local\Temp\mp3el.exe C:\Users\JOY\AppData\Local\Temp\MSETUP4.EXE C:\Users\JOY\AppData\Local\Temp\qcpdec.exe C:\Users\JOY\AppData\Local\Temp\SkypeSetup.exe C:\Users\Pro tools\AppData\Local\Temp\BingBarSetup-Partner.exe C:\Users\Pro tools\AppData\Local\Temp\BingSvc.exe C:\Users\Pro tools\AppData\Local\Temp\BSvcProcessor.exe C:\Users\Pro tools\AppData\Local\Temp\BSvcUpdater.exe C:\Users\Pro tools\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgfpno2.dll C:\Users\Pro tools\AppData\Local\Temp\Execute2App.exe C:\Users\Pro tools\AppData\Local\Temp\GUR7BE5.exe C:\Users\Pro tools\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe C:\Users\Pro tools\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe C:\Users\Pro tools\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\Pro tools\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Pro tools\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Pro tools\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Pro tools\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe C:\Users\Pro tools\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe C:\Users\Pro tools\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe C:\Users\Pro tools\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe C:\Users\Pro tools\AppData\Local\Temp\jre-8u111-windows-au.exe C:\Users\Pro tools\AppData\Local\Temp\jre-8u31-windows-au.exe C:\Users\Pro tools\AppData\Local\Temp\jre-8u40-windows-au.exe C:\Users\Pro tools\AppData\Local\Temp\jre-8u51-windows-au.exe C:\Users\Pro tools\AppData\Local\Temp\jre-8u66-windows-au.exe C:\Users\Pro tools\AppData\Local\Temp\lowproc.exe C:\Users\Pro tools\AppData\Local\Temp\msvcp90.dll C:\Users\Pro tools\AppData\Local\Temp\msvcr90.dll C:\Users\Pro tools\AppData\Local\Temp\SkypeSetup.exe C:\Users\Pro tools\AppData\Local\Temp\stubhelper.dll C:\Users\Pro tools\AppData\Local\Temp\zipsetup.exe C:\Users\Pro tools\AppData\Local\Temp\{D56E0567-9327-4EBF-B067-FAB0C0116E71}-43.0.2357.81_chrome_installer.exe C:\Users\test\AppData\Local\Temp\316gugMj-prog.exe C:\Users\test\AppData\Local\Temp\316gugMj-upd.exe EmptyTemp: end
  5. Hi thanks so much for your reply so I don't know exactly how to do a system restore I read how to do it but I'm scared that I will lose stuff if I Dont do it properly. Not sure if I configured Windows Explorer probably not also I believe I did try recuva if it's in my notes I don't remember I tried so many different things it's been a couple of days pardon the delay. I can see those files on my desktop and I'm not sure what the missing files are as it was just a whole row of stuff including icons programs and files that was taken off the desktop. I did have Malwarebytes and all of a sudden it just stopped working I'm actually corresponding with their customer service via email and they asked me to delete certain things from my temp folder I don't want to do this just yet because I believe that the files that I'm missing might actually be in the temp folder so I want to First deal with you guys to recover and then do as they ask. I definitely don't need the Java and the rest of those programs that you said might be suspect I can definitely get those removed need be... most importantly I just want to recover the files that are missing a lot of them are not necessarily programs but folders with my personal stuff please help thank you
  6. hi thanks for your reply Cecilia! i attached like you asked. I already ran this so i had it handy , it was through these logs and others (below) that i actually even realized it was "lavasofttcpservice because it installed so quickly and there were so many i coundnt keep track until i saw all these logs.. 11/08/16 00:33:46, Redirector started (V2.3.4.7) 11/08/16 00:33:46, Licensed to: Lavasoft 11/08/16 00:33:46, Path and params: "C:\Program Files\Lavasoft\Web Companion\TcpService\\LavasoftTcpService.exe" 11/08/16 00:33:46, Current directory is: C:\Windows\system32 11/08/16 00:33:46, Time since boot: -1706765052 11/08/16 00:33:46, PID: 4192 11/08/16 00:33:46, String library passed MT test 11/08/16 00:33:46, OS: Windows 7 11/08/16 00:33:46, UAC is elevated, this is good 11/08/16 00:33:46, Configured to run as a service 11/08/16 00:33:46, Before run 11/08/16 00:43:02, After run and 11/08/16 00:33:46, LavasoftTcpService.exe started (V2.3.4.7) 11/08/16 00:33:46, Time since boot: -1706764974 11/08/16 00:33:46, OS: Windows 7 11/08/16 00:33:46, Going to load data 11/08/16 00:33:46, Going to save data, caller is: First save 11/08/16 00:33:46, Flag: dlltoload with value: 11/08/16 00:33:46, Data saved successfuly 11/08/16 00:33:46 ** Error **, Failed to load data with error: CDataManager::Load - Failed to open file: C:\Windows\system32\LavasoftTcpService.ini with error: 2 11/08/16 00:33:46, No DLL set to be loaded, will init COM 11/08/16 00:33:46, Trying to start UDP channel 11/08/16 00:33:46, Starting relay on port: 12344 11/08/16 00:33:46, Relay started successfuly 11/08/16 00:33:46, Started as a service 11/08/16 00:33:46, Started main message loop 11/08/16 00:33:46 ** Error **, CWFP::SetPID - Failed to open file: 2 11/08/16 00:33:46 ** Error **, Failed to set PID for WFP: CWFP::SetPID - Failed to open file: 2 11/08/16 00:33:46, KeepAlive thread in standby 11/08/16 00:37:18, Going to clear data (user called method) 11/08/16 00:37:18, Clearing data 11/08/16 00:37:18, Going to get table (user called method) 11/08/16 00:37:18, Going to commit data table (user called method) 11/08/16 00:37:18, Going to get table (user called method) 11/08/16 00:37:18, Going to commit data table (user called method) 11/08/16 00:37:18, Going to get table (user called method) 11/08/16 00:37:18, Going to commit data table (user called method) 11/08/16 00:42:59, Starting shutdown process 11/08/16 00:42:59 ** Error **, CWFP::SetPID - Failed to open file: 2 11/08/16 00:42:59 ** Error **, Failed to set PID on shutdown for WFP: CWFP::SetPID - Failed to open file: 2 11/08/16 00:43:02, Clearing sockets 11/08/16 00:43:02, Sockets cleared 11/08/16 00:43:02, Shutting down SSL and relay 11/08/16 00:43:02, Shutting down Async winsock 11/08/16 00:43:02, Shutting down Winsock 11/08/16 00:43:02, Winsock cleared 11/08/16 00:43:02, Clearing extensions 11/08/16 00:43:02, Shutting down execution threads 11/08/16 00:43:02, Shutting down execution threads (stats) 11/08/16 00:43:02, Shutting down execution threads (saving stats) 11/08/16 00:43:02, LavasoftTcpService.exe by went down (V2.3.4.7) also this is a btw question but why does it show 5 users when theres only supposed to be 3? thanks so much! FRST.txt Addition.txt
  7. Hi, I wound up downloading the lavasoft accidentally actually it came with Samsung Smart Switch app that I was trying to get that I got off of Qik downloads.. once I realized I did not intentionally download this software I try to uninstall it all of a sudden after I clicked uninstall a pop-up window came with two boxes and it asked me to check the boxes I don't remember verbatim something to the effect of do you want everything to stay the same as it was before you download it or something like that I click those boxes because it actually gave a tip and it's suggested that I check those boxes off once I did that everything got un installed however there was a whole row of icons and documents that disappeared from my desktop now this is super weird and I'm freaking out I've been doing so many things trying to retrieve these honestly I shouldn't even have to go through this I don't understand what happened please help me tell me where my files are how can I get my files and documents back please thank you