The Official Malware/Antivirus Thread - Need help or general advice? Read this first!

[Bearcat]

Originally Posted by munkey

C:\Program Files\UVC\UVC.exe
O4 - HKCU\..\Run: [UVC] C:\Program Files\UVC\UVC.exe -bootstart

What is this? Google seems to think it might be malware... one site said it was Universal Village Corp, so if it's a game you downloaded from the internet, it's up in the air whether it's safe or not. I'd say at least delete the 04 - HKCU line so it's not starting when you start your computer, but I'd delete both (run the HiJack This scan, checkmark them, and click 'fix selected').

Originally Posted by munkey

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;;*.local

You have a lot of toolbars. I'd go into Safe Mode and run a full scan with malwarebytes and see if it gets rid of this one... in the past I've seen a ProxyServer entry along with the ProxyOverride which is bad, but I don't think that entry alone is causing problems..... might get a second opinion, but I think you're okay to delete it.

[DaFace]

Originally Posted by Bearcat

What is this? Google seems to think it might be malware... one site said it was Universal Village Corp, so if it's a game you downloaded from the internet, it's up in the air whether it's safe or not. I'd say at least delete the 04 - HKCU line so it's not starting when you start your computer, but I'd delete both (run the HiJack This scan, checkmark them, and click 'fix selected').



You have a lot of toolbars. I'd go into Safe Mode and run a full scan with malwarebytes and see if it gets rid of this one... in the past I've seen a ProxyServer entry along with the ProxyOverride which is bad, but I don't think that entry alone is causing problems..... might get a second opinion, but I think you're okay to delete it.

I don't know any reason why you'd ever have a localhost ProxyOverride. Whether it's causing problems now or not, I can't say, but I'm pretty sure it was put in there by something nasty at one point or another. So...second opinion...delete it.