help - i performed all the scans and i think i might still have malware or viruses

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by monkiemonk, Jul 24, 2008.

  1. monkiemonk

    monkiemonk Private E-2

    help me!

    i previously had malware and i performed the 'READ & RUN ME FIRST. Malware removal guide', i think it helped abit but my computer isnt functioning as it used to. my desktop image remains white no matter how many times i try to change it and my computer seems to be performing slower. help me!

    ill attach the logs from the scans.
    thanks!!
     

    Attached Files:

  2. monkiemonk

    monkiemonk Private E-2

    help - i performed all the scans and i think i might still have malware or viruse

    heres the final log. thx again.!
     

    Attached Files:

  3. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Re: help - i performed all the scans and i think i might still have malware or viruse

    The first thing you need to do is uninstall Messenger Plus! Live --. A known cause of LOP infections!

    Then right click your desktop / properties / desktop / customize / web....and make sure there is nothing checked and that this is not there:
    O24 - Desktop Component 0: Privacy Protection
    If it is, remove it!

    Do you know what this is:
    C:\Program Files\DcOo CS1.6 ™DIŽø‘

    Use windows explorer to find and delete:
    C:\WINDOWS\system32\htxkfrbe.dll

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file.
     
  4. monkiemonk

    monkiemonk Private E-2

    Re: help - i performed all the scans and i think i might still have malware or viruse

    hey!

    koolz!. i got my desktop image back! yay. i dont know if my comp is operating at its normal speed but maybe im just used to how slow it was when i was fighting the virus. =.=.

    C:\Program Files\DcOo CS1.6 ™DIŽø
    i think this program is Counter-Strike. but im not sure if this "™DIŽø" is supposed to be there. maybe im wrong.

    here's the log!. thanks many!
    oh. and should i run all the things i donwloaded from the guide (like superantispyware and ccleaner etc) on safe mode just to make sure?
     

    Attached Files:

  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Re: help - i performed all the scans and i think i might still have malware or viruse

    You still have these showing in your logs:

    C:\Documents and Settings\All Users\Application Data\Messenger Plus!
    C:\Program Files\Messenger Plus! Live ---> please find delete them.

    Now Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file and tell me how things are running.
     
  6. monkiemonk

    monkiemonk Private E-2

    Re: help - i performed all the scans and i think i might still have malware or viruse

    hey.

    here's the zip file.

    so should i run the scans on safe mode just to be safe?
     

    Attached Files:

  7. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Re: help - i performed all the scans and i think i might still have malware or viruse

    No need to run anything else....your logs are clean. Let's just do some cleanup from the process:

    Please disable the guest account in user accounts.

    Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Are you having any other malware issues?
     
  8. monkiemonk

    monkiemonk Private E-2

    Re: help - i performed all the scans and i think i might still have malware or viruse

    cool. i think im clean. everything seems to be working. my startup is slow-ish, but i guess thats normal.

    thank you so much for all!
     
  9. monkiemonk

    monkiemonk Private E-2

    Re: help - i performed all the scans and i think i might still have malware or viruse

    hello. i thought everything was ok. but when shutting down my computer, a sign keeps popping up and that alert sound goes off. the message appears in a window after i the computer has begun shutting down. this is what the message says:

    title of message: dwwin.exe - DLL Initialization Failed
    message: The application failed to initialize because the window station is shutting down.

    (and then at the bottom is an 'ok' button)

    ive tried shutting down several times but the message keeps appearing. previously another message about some 'groove monitor' kept appearing too, but after i uninstalled it, it was gone. however, the 'dwwin.exe' message keeps popping up everytime i install.

    i dont recall any dwwin programs or files so im not sure where it came from.

    what should i do to get rid of it??
     
  10. monkiemonk

    monkiemonk Private E-2

    Re: help - i performed all the scans and i think i might still have malware or viruse

    typo. whoops. i meant that the 'dwwin.exe' message keeps popping up everytime i shut down
     
  11. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Re: help - i performed all the scans and i think i might still have malware or viruse

    The file refers to DrWatson which is a system tool.....you need to tell me what error it is trying to report. You could try running Windows One Care

    There should be a DrWatson error text on your c drive.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds