isiwizard/wuaudit.exe

[essexboy]

Each code is specific to a single system and if used on another it may well have an unpredictable result.  You need a fix crafted specifically for you. 

Please run OTL and attach the log please

[proaudio]

Thanks for answer.... Ok, I understand that... my OTL.txt file is 271 Kbytes, and that's all I have... there's no Extras.txt file. I am in windows 8. Thank you again for your patience! 

[essexboy]

Attach the log and then I will make a fix for you

[proaudio]

Ok.... here it is.....

[rheyank]

when i open firefox and avast anti virus detect this URL:

http://hea1th-insurance-costs.com/j.php?u=7133570c61236ea356c3011012be814c&b=1&v=c0005x&rx=6098143

I beg enlightenment, how do I erase it?

please help me
thanks

[essexboy]

@rheyank please start your own thread



@proaudio


 Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  
  

Code: [Select]

:Commands
[CREATERESTOREPOINT]

:OTL
O4 - HKU\S-1-5-21-1965147933-3229020990-1516968896-500..\Run: [BackgroundContainer] C:\Users\Administrador\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll (Conduit Ltd.)
O4 - HKU\S-1-5-21-1965147933-3229020990-1516968896-500..\Run: [SearchProtection] C:\Users\Administrador\AppData\Roaming\Search Protection\SearchProtection.EXE (Spigot, Inc.)
O4 - HKU\S-1-5-21-1965147933-3229020990-1516968896-500..\Run: [tsiVideo] C:\Windows\SysWOW64\rundll32.exe C:\Users\ADMINI~1\AppData\Local\Temp\\tsiVi132.dll,start File not found
[2013/10/29 00:28:12 | 000,000,000 | ---D | C] -- C:\Users\Administrador\AppData\Roaming\Search Protection
[2013/10/20 13:40:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Conduit
[2013/10/20 13:40:34 | 000,000,000 | ---D | C] -- C:\Users\Administrador\AppData\Local\Conduit
[2013/10/20 13:40:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Conduit

:Files
C:\Users\ADMINI~1\AppData\Local\Temp\iswizard

:Commands
[resethosts]
[emptytemp]
[Reboot]

• Then click the Run Fix button at the top
  
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Please download Junkware Removal Tool to your desktop.

• Right-mouse click JRT.exe and select "Run as Administrator" the tool will open and start scanning your system
• please be patient as this can take a while to complete depending on your system's specifications
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• post the contents of JRT.txt into your next message.

[proaudio]

Ok, I got it... this is the new OTL.txt file.

[essexboy]

Could you confirm that all alerts have now ceased

[proaudio]

Well... wuaudit.exe is not found... McAfee don't says anything... it sounds very good. So, now must I run JRT? ( obviously, have I to disabling McAfee?)

[essexboy]

Yes run JRT and that will remove all the adware

[proaudio]

Well... so, thank you very much for your help!