I'm way out of my depth, this is bad
Why do you say that, Tom? CD Emulators such as Daemon Tools use rootkit-like techniques to hide from other applications and to circumvent copy protections. They can interfere with investigative or anti-rootkit (ARK) tools, such interference producing misleading or inaccurate scan results, as well as false detection of legitimate file, schemes.
~~~~~~~~~~~~~~~
Hi, LionZion.
Billeo is a password manager. However, since you have KeePass, you wouldn't need it. It is showing as a leftover. Perhaps you had it installed at one time and uninstalled it. You can remove the entry with HijackThis:
Close all programs leaving only HijackThis running. Place a check against the following, making sure you do not check anything else by mistake:
O9 - Extra button: Billeo - {97ED3A9F-CD6F-473A-8FE1-7505C1B844C3} - (no file) (HKCU)
Click on Fix Checked when finished and exit HijackThis.
You already have the most recent Java update but have an old, vulnerable version still installed. Go to add/remove programs and remove the following vulnerable version of Java:
Java(TM) 6 Update 2
Please download
JavaRa and unzip it to your desktop.
- Double-click on JavaRa.exe to start the program. (Windows Vista users Right-click JavaRa.exe > Select Run as Administrator)
- Click on Remove Older Versions to remove older versions of Java.
- A logfile will pop up. Please save it to a convenient location.
Based on IOBit's past practices, I wouldn't run it on my computer. See the following for additional information:
--
IOBit Steals Malwarebytes' Intellectual Property
--
IOBit’s Denial of Theft Unconvincing
--
IOBit Theft Conclusion.
Other than the Billeo entry in HJT (not shown in the DDS log), how is your computer?
I saw the unknown MBR code in the aswMBR log and thought it looked like a rootkit.
