Ran Read and run

[mikefrayser]

Hi. I ran read and run first. This is for a friend's computer. She is running Vista Home Premium 64 bit so I only ran SAS, MalwareBytes and MGTools. She has some issues still. No MS Office apps will open. When I open task manager under system resources it says she is always using around 1.8 gig of memory. She has 4 gig RAM but that seems a little high for a computer sitting idle to me. I may be on the wrong track even trying the Malware thing but I don't know. I'm attaching the logs and any help you can give will be greatly appreciated. You guys really are doing a great service and should be commended. Thank you so much.

[TimW]

Please check that you ran the correct version of MGTools as the log you attached is both virtually empty ( by its size ) and will not open.

[mikefrayser]

I'm on my way to check it now. I do have a question though. In Vista, do I double click MGTools.exe or do I right click it and run it as an administrator. I ran the .bat file as an administrator but I had to do the .exe file twice double clicking on it before it would even create the MGTools folder in my c drive

[TimW]

(Note: if using Vista, don't double click, use right click and select Run As Administrator).

This is for both the MGTools.exe and the getlogs.bat. Then make the agreement to run HJT and wait till the scan tells you it is done.

[mikefrayser]

I deleted everything associated with MGTools and redownloaded it. When I ran the .exe file as admin it did a bunch of stuff and it created the MGlogs.zip file already. Maybe it is supposed to do that but I'm not sure so I'm uploading that one now. I'm having to use another computer and a flash drive though because the one I'm working on keeps freezing up. Anyway, here is the first log file and I'm about to run GetLog.bat and I'll send that one next. Thanks for you help.

[mikefrayser]

Well, I uploaded that log file and then ran GetLogs.bat as admin. The thing says it finished and hitting any key will close the window but it isn't closing it and the windows explorer window behind it that I ran the file from is still there and the address bar or whatever you call that thing is green and the green part is kind of pulsing like maybe it froze up writing the zip file or something. I'm not sure. Sorry I can't be of more help here.

[mikefrayser]

Here is the log file that was left after I tried to run GetLogs.bat. I think it froze up and I had to just power the computer off and then let it do chkdsk and all that. I copied it to a flash drive again. I hope this helps. I'm also trying to run GetLogs.bat again right now and if it works better this time I'll send that file too. Thank you again for everything and I'm sorry I can't be of more help on my end.

[mikefrayser]

I tried to run MGTools.exe again in regular and safe modes and it locks up after it says 64 Bit Window OS Found. Please help me

[mikefrayser]

I think I finally got it. I would like to apologize if I lack the proper etiquitte. I'm not overly experienced with this type of correspondence. I think this is a good MGLogs zip file. I had to run GetLogs in safe mode. Thank you again for all of your help.

[TimW]

I am not seeing anything to indicate malware in your logs. I do suggest that you remove these items in your temp folders:
C:\Windows\TEMP\pn6189.tmp
C:\Windows\TEMP\pnCDA4.tmp
C:\Windows\TEMP\UDDBC9C.tmp
C:\Users\Barbara\AppData\Local\Temp\is-3I9L1.tmp
C:\Users\Barbara\AppData\Local\Temp\is-UF9RQ.tmp

Let me know exactly what issues you are still having.

[mikefrayser]

Thank you and I will delete those files. The computer just locks up for no apparent reason some times. And no MS Office apps will open. I checked the resources and it seems to always be using 1.5 to 1.8 gig of RAM out of a total of 4 even when no apps are running. This all just started a couple of weeks ago when she installed a new wireless printer. I uninstalled the printer, but the problems still are here. Plus, it won't complete windows update and it is a critical one without locking up. Thank you so much for you help with this.

[TimW]

This sounds like a software issue. I suggest that you post in the software forum for both these issues. You might just need to run a repair in your office products. And your updating issue should also be looked at in software.

Sine you are not having any malware problems, it is time to do our final steps:

1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real-time protection. They are useful as backup scanners.They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
   
   • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
   • "%userprofile%\Desktop\combofix" /u
     
     • Notes: The space between the combofix" and the /u, it must be there.
     • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
4. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
5. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
6. Go to add/remove programs and uninstall HijackThis.
7. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
8. If you are running Vista, Windows XP or Windows ME, do the below:
   
   • Refer to the cleaning procedures in step 3 the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore ato create a new clean Restore Point.
9. After doing the above, you should work thru the below link:
   
   • How to Protect yourself from malware!