Author Topic: TARMA INSTALLER  (Read 12765 times)

0 Members and 1 Guest are viewing this topic.

Offline Hermie

  • Full Member
  • ***
  • Posts: 155
TARMA INSTALLER
« on: August 04, 2013, 11:15:15 AM »
Morning guys.
I found TARMA INSTALLER @ C:\ProgramData\Tarma Installer.
What is it, what does it?
Do I have to remove it from my pc, how to proceed?
OS: Windows Vista 32 bits.
« Last Edit: August 04, 2013, 11:17:31 AM by Hermie »

Offline Asyn

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 30948
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: TARMA INSTALLER
« Reply #1 on: August 04, 2013, 11:19:14 AM »
Please attach your logs. (AdwCleaner, MBAM and OTL..!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0
XP SP3 - Avast 10.2.2218 - CIS 3.14 [FW/D+] - MBAM 1.75 [On Demand] - Firefox ESR 31.6 [NS/ABP/EHH/BP/SVC] - Thunderbird 31.6 [EM]
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen und Infos):
https://forum.avast.com/index.php?topic=60523.0

Offline bob3160

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 27202
  • 55 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: TARMA INSTALLER
« Reply #2 on: August 04, 2013, 11:36:09 AM »
Please attach your logs. (AdwCleaner, MBAM and OTL..!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0
"Tarma Installer" is a Windows program installer and is quite often used by people that write rogue programs.
Since the program itself is not the problem but the fact that it's on your system may indicate the existence
of some unwanted programs and files on your system.
Following the advice given by Asyn is advisable.

Free avast! Security Seminar: http://www.authorstream.com/Presentation/bob3160-1425909-protecting-yourself/    -  Important: http://www.organdonor.gov/
My Blog: http://bob3160.blogspot.com/ - Win 8.1 Pro 64bit, 8 Gig Ram, avast!2015.10.2.2218 Free, MBAM, WinPatrol -- How to Successfully Install Avast http://goo.gl/VLXde

Offline Hermie

  • Full Member
  • ***
  • Posts: 155
Re: TARMA INSTALLER
« Reply #3 on: August 04, 2013, 07:11:49 PM »
Thanks for the replies.

MBAM log see attachment.
AdwCleaner: attachment R1 after search, S1 after restart.
OTL: see attachment.

Kind regards, Herman

Offline bob3160

  • Avast Überevangelist
  • Maybe Bot
  • *****
  • Posts: 27202
  • 55 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: TARMA INSTALLER
« Reply #4 on: August 04, 2013, 07:31:15 PM »
essexboy has been alerted. :)
Free avast! Security Seminar: http://www.authorstream.com/Presentation/bob3160-1425909-protecting-yourself/    -  Important: http://www.organdonor.gov/
My Blog: http://bob3160.blogspot.com/ - Win 8.1 Pro 64bit, 8 Gig Ram, avast!2015.10.2.2218 Free, MBAM, WinPatrol -- How to Successfully Install Avast http://goo.gl/VLXde

Offline Hermie

  • Full Member
  • ***
  • Posts: 155
Re: TARMA INSTALLER
« Reply #5 on: August 04, 2013, 07:41:22 PM »
Thanks Bob3160!

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 36476
  • Dragons by Sasha
    • Malware fixes
Re: TARMA INSTALLER
« Reply #6 on: August 04, 2013, 10:20:32 PM »
Hi you will need to manually reset your Chrome home page

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:Commands
[CREATERESTOREPOINT]

:OTL
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
[2013-08-04 10:44:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Herman\AppData\Roaming\mozilla\Firefox\Profiles\oxh9hx41.default\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}
[2013-08-04 10:43:59 | 000,000,000 | ---D | M] (Lavasoft Search Plugin) -- C:\Users\Herman\AppData\Roaming\mozilla\Firefox\Profiles\oxh9hx41.default\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (Reg Error: Key error.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Reg Error: Key error.)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)

:Commands
[resethosts]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

Offline Hermie

  • Full Member
  • ***
  • Posts: 155
Re: TARMA INSTALLER
« Reply #7 on: August 05, 2013, 08:54:44 AM »
Hi, how to reset my Chrome home page?

OTL run fix, reboot PC plus quick scan done.
Report: see attachment.

I do look forward hearing from you again, thanks in advance.

Regards, Hermie

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 36476
  • Dragons by Sasha
    • Malware fixes
Re: TARMA INSTALLER
« Reply #8 on: August 05, 2013, 11:42:35 AM »

Offline Hermie

  • Full Member
  • ***
  • Posts: 155
Re: TARMA INSTALLER
« Reply #9 on: August 05, 2013, 01:39:59 PM »
It seems that the problem has been fixed, the computer behaves well.

Thanks for great support. Thank you!

Regards, Hermie

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 36476
  • Dragons by Sasha
    • Malware fixes
Re: TARMA INSTALLER
« Reply #10 on: August 05, 2013, 01:43:14 PM »
Run AdwCleaner and press uninstall
Run OTL and press cleanup

Keep safe :)

Offline Hermie

  • Full Member
  • ***
  • Posts: 155
Re: TARMA INSTALLER
« Reply #11 on: August 05, 2013, 02:27:02 PM »
Done.

Thanks for great help!

Best regards, Hermie