pyagcore.search.searchdetection

[chloeam]

i understand this is sum kind of virus, but all i really want is to get rid of it because it keeps popping up everytime i try to log on to msn. i have uninstalled and reinstalled windows live messenger and tried repairing it and tried pc tools registry mechanic, but it has only fixed six of the problems, to get a full clean out i have to pay, i do not have the money to do so.

 

Is there ANY way i can get rid of this message/virus:

['Traceback (most reacent call last):\n',' File''c:\\pyagcore\\pyagcore\_init_.py'', line 6, in <module>\n','valueerror: bad marshal data\n']

 

it pops up everytime i try to go onto msn and therefore leads me to closing the application which won't close properly and has to "end now".

 

iam at wits end so can someone please help me get msn to work again :(

 

thank you

 

Chloeam

[DSTM]

Hi chloeam.

First, what Toolbars do you have installed?

Have you the Kiwee Live Toolbar,installed?

Edited April 16, 2010 by DSTM

[DSTM]

Description.

 

Pyagcore is part of a Browser Helper Object, and normally installs the Kiwee live Tool Bar, with it.

Want to make sure I am on the right track,before giving you a Fix for it.:)

[DSTM]

To Malware Specialists.

 

Sorry, I posted here, not realizing it was in the Malware section.

My Apologies Gentlemen.

Please take over, and advise Member.

 

Dougie.

[Net_Surfer]

Hello chloeam and Welcome to FreePc Help Malware removal forum.

 

My nick is Net_Surfer and I will be helping you with your malware issues, this may or may not solve other issues you may have with your machine.

 

Please note that whatever repairs we make, are for fixing "your computer problems only" and by no means should be used on another computer.

 

I would also like to inform you that most of us here at freepc help offer our expert assistance out of the goodness of our hearts. Please be courteous and appreciative for the assistance provided!

 

 

Please be patient and I'd be grateful if you would note the following:

 

The cleaning process is not instant. Gmer, DDS, ComboFix, RSIT and hijackthis logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen.

 

 

1. Please Read All Instructions Carefully and perform the steps fully and in the order they are written.
   
2. If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
   
3. Do not attempt to clean your computer with any tools other than the ones I ask you to use during the cleanup process.
   
4. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.
   
5. Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.
   
6. Please continue to review my answers until I tell you that your machine is clean and free of malware. (Absence of symptoms does not mean that everything is clear.
   

Just because you can't see a problem doesn't mean it isn't there.

 

If you can do these things, everything should go smoothly. :good:

 

OK. chloeam.......If you have a Vista computer ensure that you right click on the tools and run them as an Admin. IF XP double click on the program to run them.

 

Before we begin, you should save these instructions in Notepad to your Desktop, or print them, for easy reference and to make sure you don't get lost.

Make sure to work through the fixes in the exact order in which they are mentioned below and do not miss any steps out. If at any point you have questions, or are unsure of the instructions, do not hesitate to post here and ask for clarification before proceeding with the fixes.

 

Please carefully follow the next set of steps:

 

Step 1. * exeHelper by Raktor.

 

Please download: exeHelper to your desktop.

 

Double-click on exeHelper.com to run the fix.

A black window should pop up, press any key to close once the fix is completed.

Post the contents of exehelperlog.txt (Will be created in the directory where you ran exeHelper.com, and should open at the end of the scan)

Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).

 

 

http://img233.imageshack.us/img233/7729/mbamicontw5.gifMalwarebytes' Anti-Malware

 

step 2. * Please download: Malwarebytes' Anti-Malware

Note: If you already have Malwarebytes' Anti-Malware, just update first then run it.

• Double Click mbam-setup.exe to install the application.
  
• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select "Perform a Full system Scan", then click Scan (the scan may take some time to finish, so please be patient).
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  
• Copy and Paste the entire report in your next reply .
  

Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.

 

 

 

Step 3.

• Download OTL to your desktop.
  if you have problems, try this download link:
  OTL
  
• Double click on the http://billy-oneal.com/Canned%20Speeches/speechimages/OTL/otlDesktopIcon.png icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  (Vista user's right click and ran as an Admin.)
  
• When the window appears, underneath Output at the top change it to Minimal Output.
  
• Check the boxes beside LOP Check and Purity Check
  

..

http://img.photobucket.com/albums/v708/starbuck50/new/newOtl2.png

• Now copy the lines in bold below:
   
  netsvcs
  msconfig
  %SYSTEMDRIVE%\*.exe
  /md5start
  eventlog.dll
  scecli.dll
  netlogon.dll
  cngaudit.dll
  sceclt.dll
  ntelogon.dll
  logevent.dll
  iaStor.sys
  nvstor.sys
  atapi.sys
  IdeChnDr.sys
  viasraid.sys
  AGP440.sys
  vaxscsi.sys
  nvatabus.sys
  viamraid.sys
  nvata.sys
  nvgts.sys
  iastorv.sys
  ViPrt.sys
  eNetHook.dll
  ahcix86.sys
  KR10N.sys
  nvstor32.sys
  ahcix86s.sys
  nvrd32.sys
  symmpi.sys
  adp3132.sys
  /md5stop
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job /lockedfiles
  %systemroot%\system32\drivers\*.sys /lockedfiles
  CREATERESTOREPOINT
  
• right click in the Custom Scans/Fixes window (under the blue bar) and choose Paste.
   
  http://img.photobucket.com/albums/v708/starbuck50/new%20forum/scan-fix.png
  .
  
• Click the Run Scan button.
   
  http://img.photobucket.com/albums/v708/starbuck50/runscan.png
  
• Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them with your next reply.
  

Summary of the logs we will need in your next reply:

• The report log of exehelper.
  
• The report log of MBAM
  
• the report logs of OTL:
   
  OTL.Txt and Extras.Txt
  

 

Upon completing the above steps I will review your logs and take the steps necessary with you to get your machine back in working order clean and free of malware.

 

Please DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean and free of malware!!!

 

Regards

Net_Surfer