Avast WEBforum

Other => General Topics => Topic started by: Hermie on August 04, 2013, 11:15:15 AM

Title: TARMA INSTALLER
Post by: Hermie on August 04, 2013, 11:15:15 AM
Morning guys.
I found TARMA INSTALLER @ C:\ProgramData\Tarma Installer.
What is it, what does it?
Do I have to remove it from my pc, how to proceed?
OS: Windows Vista 32 bits.
Title: Re: TARMA INSTALLER
Post by: Asyn on August 04, 2013, 11:19:14 AM
Please attach your logs. (AdwCleaner, MBAM and OTL..!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0
Title: Re: TARMA INSTALLER
Post by: bob3160 on August 04, 2013, 11:36:09 AM
Please attach your logs. (AdwCleaner, MBAM and OTL..!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0 (http://forum.avast.com/index.php?topic=53253.0)
"Tarma Installer" is a Windows program installer and is quite often used by people that write rogue programs.
Since the program itself is not the problem but the fact that it's on your system may indicate the existence
of some unwanted programs and files on your system.
Following the advice given by Asyn is advisable.

Title: Re: TARMA INSTALLER
Post by: Hermie on August 04, 2013, 07:11:49 PM
Thanks for the replies.

MBAM log see attachment.
AdwCleaner: attachment R1 after search, S1 after restart.
OTL: see attachment.

Kind regards, Herman
Title: Re: TARMA INSTALLER
Post by: bob3160 on August 04, 2013, 07:31:15 PM
essexboy has been alerted. :)
Title: Re: TARMA INSTALLER
Post by: Hermie on August 04, 2013, 07:41:22 PM
Thanks Bob3160!
Title: Re: TARMA INSTALLER
Post by: essexboy on August 04, 2013, 10:20:32 PM
Hi you will need to manually reset your Chrome home page

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
Code: [Select]
:Commands
[CREATERESTOREPOINT]

:OTL
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
[2013-08-04 10:44:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Herman\AppData\Roaming\mozilla\Firefox\Profiles\oxh9hx41.default\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}
[2013-08-04 10:43:59 | 000,000,000 | ---D | M] (Lavasoft Search Plugin) -- C:\Users\Herman\AppData\Roaming\mozilla\Firefox\Profiles\oxh9hx41.default\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (Reg Error: Key error.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Reg Error: Key error.)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)

:Commands
[resethosts]
[emptytemp]
[Reboot]
Title: Re: TARMA INSTALLER
Post by: Hermie on August 05, 2013, 08:54:44 AM
Hi, how to reset my Chrome home page?

OTL run fix, reboot PC plus quick scan done.
Report: see attachment.

I do look forward hearing from you again, thanks in advance.

Regards, Hermie
Title: Re: TARMA INSTALLER
Post by: essexboy on August 05, 2013, 11:42:35 AM
Home page change https://support.google.com/websearch/answer/463?hl=en and  https://support.google.com/chrome/answer/2765944?hl=en-GB

How is the computer behaving ?
Title: Re: TARMA INSTALLER
Post by: Hermie on August 05, 2013, 01:39:59 PM
It seems that the problem has been fixed, the computer behaves well.

Thanks for great support. Thank you!

Regards, Hermie
Title: Re: TARMA INSTALLER
Post by: essexboy on August 05, 2013, 01:43:14 PM
Run AdwCleaner and press uninstall
Run OTL and press cleanup

Keep safe :)
Title: Re: TARMA INSTALLER
Post by: Hermie on August 05, 2013, 02:27:02 PM
Done.

Thanks for great help!

Best regards, Hermie