TechSpot

Qtcore4.dll and/or DaemonProcess.exe not found

By compused
Nov 14, 2013
Post New Reply
  1. My partner's laptop (HP with Vista and Windowsw 98) had 135 viruses found by Malwarebytes which began "Pup .... and most were registry type viruses. We have removed these viruses but when he called up Internet Explorer, he keeps on getting one or the other of the above messages. When he tries to go on the Internet to find out what Qtcore.dll or DaemonProcess.exe is for, it tries to download something and crashes the Internet.


    Malwarebytes Anti-Malware 1.75.0.1300

    www.malwarebytes.org



    Database version: v2013.11.14.06



    Windows Vista Service Pack 2 x86 NTFS

    Internet Explorer 8.0.6001.19475

    User :: USER-PC [administrator]



    14/11/2013 16:12:50

    mbam-log-2013-11-14 (16-12-50).txt



    Scan type: Full scan (C:\|D:\|)

    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

    Scan options disabled: P2P

    Objects scanned: 412298

    Time elapsed: 2 hour(s), 6 minute(s), 39 second(s)



    Memory Processes Detected: 0

    (No malicious items detected)



    Memory Modules Detected: 0

    (No malicious items detected)



    Registry Keys Detected: 34

    HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Quarantined and deleted successfully.

    HKCR\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.

    HKCR\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} (PUP.Optional.BrowseFox.A) -> Quarantined and deleted successfully.

    HKCR\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899} (PUP.Optional.WebCake.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517} (PUP.WebCake) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517} (PUP.WebCake) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00078E95-3A4A-4137-8DE7-2824908D1C17} (PUP.Optional.SearchGolTB.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{204DF522-9A96-4A72-ABB0-60F7A216D6D2} (Adware.Whilokii) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{8F547BDD-FCD4-48F8-A06F-573D6F404A3C} (PUP.Optional.SearchGolTB.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF6B0594-6008-4327-93E5-608AD710A6FA} (PUP.Optional.WebCake.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CF190686-9E72-403C-B99D-682ABDB63C5B} (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE063412-BEA4-4D76-8ED3-183BE6220D17} (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.

    HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

    HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Quarantined and deleted successfully.

    HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Quarantined and deleted successfully.

    HKCU\Software\BabSolution\Redir (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Quarantined and deleted successfully.

    HKLM\SOFTWARE\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.

    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BonanzaDealsLive.exe (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.



    Registry Values Detected: 4

    HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser|{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Data: Ìéz—ƒ¯èEž


    ây‚âÕ -> Quarantined and deleted successfully.

    HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Data: -> Quarantined and deleted successfully.

    HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Data: 2O1R1G2Z1F1G1M -> Quarantined and deleted successfully.

    HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs|bProtectTabs (PUP.Optional.BrowserProtect.A) -> Data: http://www.searchgol.com/?babsrc=NT_ss&mntrId=FEFD001F3A62C4B2&affID=125035&tsp=5032 -> Quarantined and deleted successfully.



    Registry Data Items Detected: 1

    HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Conduit) -> Bad: (http://search.conduit.com?SearchSource=10&ctid=CT3042917&CUI=UN26262602822142568) Good: (http://www.google.com) -> Quarantined and repaired successfully.



    Folders Detected: 9

    C:\Users\User\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\ct3268494 (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\ProgramData\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.

    C:\ProgramData\BonanzaDealsLive\Update (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.

    C:\ProgramData\BonanzaDealsLive\Update\Log (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\BonanzaDealsLive\CrashReports (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.

    C:\Program Files\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.

    C:\Program Files\BonanzaDealsLive\CrashReports (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.



    Files Detected: 87

    C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\00VTF54M\conduitinstaller[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\00VTF54M\vbmz17[1].exe (MSIL.Solimba) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Conduit\CT3042917\Produtools_MapsAutoUpdateHelper.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\GetCC.dll (MSIL.Solimba) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\ICReinstall_SoftwareUpdateSetup.exe (PUP.Optional.Installcore) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\5E17.tmp (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\SetupToparcadehits.exe (Adware.GameVance) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\SoftwareUpdateSetup.exe (PUP.Optional.Installcore) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\mconduitinstaller.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\conduitchecker.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\VisualBeeWebext.exe (PUP.Optional.CrossRider) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\ToolbarHelper.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\vbmz17.exe (MSIL.Solimba) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\is1852162411\DeltaTB.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\is1852162411\Toparcadehits.exe (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\is1852162411\wajam_download.exe (PUP.Optional.Wajam) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\is1852162411\WebConnect.exe (PUP.Optional.WebConnect.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\is1852162411\2123592_stp\SearchGol.exe (PUP.Optional.PCFixSpeed.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\is1852162411\2123760_stp\bd.exe (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\614AADF3-BAB0-7891-B292-49184D5C14FC\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\614AADF3-BAB0-7891-B292-49184D5C14FC\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\614AADF3-BAB0-7891-B292-49184D5C14FC\Latest\ccp.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\614AADF3-BAB0-7891-B292-49184D5C14FC\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\614AADF3-BAB0-7891-B292-49184D5C14FC\Latest\MntrDLLInstall.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\614AADF3-BAB0-7891-B292-49184D5C14FC\Latest\MySgolTB.exe (PUP.Optional.SearchGolTB.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\614AADF3-BAB0-7891-B292-49184D5C14FC\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busB663\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busB6FF\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busB7CA\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busB98E\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busBCAA\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busBEAC\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busC6B8\BUSolution.dll (PUP.Optional.BabSolution.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busCFED\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus4B80\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus4BC2\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus7925\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus892D\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus8D03\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus9BE4\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus9FA8\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busA5B0\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busAB3D\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busB125\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busB173\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\53202F4B-BAB0-7891-856F-056B81602124\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\53202F4B-BAB0-7891-856F-056B81602124\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\53202F4B-BAB0-7891-856F-056B81602124\Latest\BUSolution.dll (PUP.Optional.BabSolution.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\53202F4B-BAB0-7891-856F-056B81602124\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\53202F4B-BAB0-7891-856F-056B81602124\Latest\MntrDLLInstall.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\53202F4B-BAB0-7891-856F-056B81602124\Latest\MyDeltaTB.exe (PUP.Optional.Delta) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\53202F4B-BAB0-7891-856F-056B81602124\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busD7D7\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busDDD0\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busE4C2\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\busFCE4\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\CE3A2886-BAB0-7891-A209-8F25995DB9BC\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\CE3A2886-BAB0-7891-A209-8F25995DB9BC\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\CE3A2886-BAB0-7891-A209-8F25995DB9BC\Latest\ccp.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\CE3A2886-BAB0-7891-A209-8F25995DB9BC\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\CE3A2886-BAB0-7891-A209-8F25995DB9BC\Latest\MntrDLLInstall.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\CE3A2886-BAB0-7891-A209-8F25995DB9BC\Latest\MyDeltaTB.exe (PUP.Optional.Delta.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\CE3A2886-BAB0-7891-A209-8F25995DB9BC\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\ct3268494\ctbe.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\ct3268494\ieLogic.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\ct3268494\statisticsStub.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\ct3268494\stub.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\2C4FB765-BAB0-7891-A2D1-2A342990935B\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\2C4FB765-BAB0-7891-A2D1-2A342990935B\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\4A1427B7-BAB0-7891-AF77-F1194D3B848C\BExternal.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\4A1427B7-BAB0-7891-AF77-F1194D3B848C\Setup.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\4A1427B7-BAB0-7891-AF77-F1194D3B848C\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\4A1427B7-BAB0-7891-AF77-F1194D3B848C\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus118D\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus139F\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus26E3\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus3B7C\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus489A\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\bus497D\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Quarantined and deleted successfully.

    C:\WINDOWS\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V5CG081E\wajam_update[1].exe (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Roaming\Babylon\SUDump.dmp (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\SetupToparcadehits.exe (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage (PUP.Optional.BrowserDefender.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\ct3268494\chromeid.txt (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\Users\User\AppData\Local\Temp\ct3268494\setup.ini.txt (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    C:\ProgramData\BonanzaDealsLive\Update\Log\BonanzaDealsLive.log (PUP.Optional.BonanzaDeals.A) -> Quarantined and deleted successfully.



    (end)

     
  2. compused

    compused TS Enthusiast Topic Starter Posts: 126

    Further to the above, I have noted that in my Startup Menu I have HPMonitor.exe, hpwjd.exe and hpwmsd.exe, yet my partner's Startup Menu is empty. Could all these PUP viruses have deleted them or would he have to delete them himself?
     
  3. latelesley

    latelesley TS Rookie

    Hello, I'm having a similar issue with QtCore4.dll, and found your post while searching for an answer.

    To answer your second question first, the HP stuff (I'm assuming its printer software) will probably be located in the "All User" profile rather than your individual profiles. Its located at C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

    From what I can find, the daemonprocess.exe and qtcore4.dll seem to be something to do with a thing called mobogenie so I would either look in the "Uninstall a program" part of control panel, and uninstall it from there, or if it isn't there, just delete the mobogenie folder from C:\Program Files (might be C:\Program Files(x86) on a 64 bit OS, look in both if your have a 64-Bit Vista)

    As for the crashing browser, try going to the start menu, then right click internet explorer, and see if there's an option for start without addons. that may get it working enough for you to surf and find answers to your browser problems, the obvious one being to download chrome or firefox and install them as a backup browser. If you dont get an option for start without addons, try just typing in the search box iexplore -extoff and press enter. That should run IE without any addons. Its kinda like safe mode for internet explorer.

    Malwarebytes is a good scanning program, and it has found a fair few of the most common internet toolbar hacks going around just now, I certainly recognise Delta, Wajam, Babylon, and conduit engine. No scanner catches everything though, so I would run a couple of other scans too, one with your anti virus, and one with TrendMicro Housecall

    Each will probably take a couple of hours, depending on how much data you have, and how big a hard drive you have.

    Hope that helps, and I wish you luck in sorting your PC. :)

    Lesley
     
  4. Diane210

    Diane210 TS Rookie

    I've just had the same problem and after reading the blogs, I thought of how I could fix it - easy.
    start
    run

    type in msconfig
    click on Start up tab
    Uncheck box labelled Daemon rest reads Programfile/Mogogenie/etc
    Restart your computer and all the rest is history. No problems
     
    sanduni likes this.
  5. TecnoDom

    TecnoDom TS Rookie

    I too had this DaemonProcess.exe error stating that I was missing QTCore4.dll - the above post regarding 'mobogenie' solved it. I searched for 'mobogenie' on the start menu and deleted the files directly as they did not appear on the uninstall programme list on the control panel.

    Thanks for the help!
     
  6. amilapsn

    amilapsn TS Rookie

    Yes, that's the way.
    I've got rid of that problem.
     
  7. sanduni

    sanduni TS Rookie

    it worked.thank you so much.;):):D
     


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.