Malware Removal log files

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by rallen2318, Sep 22, 2008.

  1. rallen2318

    rallen2318 Private E-2

    I recently had a problem where my machine kept restarting without loading to Windows. I did the basic troubleshooting (cleaned the machine, reseated the hardware) - same result. I ended up putting my HDD in another machine and running chkdsk /r, which allowed the machine to boot. Once booted I received the error:

    C:\DOCUME~1\Owner\LOCALS~1\Temp\WER3b1e.dir00\Mini092008-01.dmp
    C:\DOCUME~1\Owner\LOCALS~1\Temp\WER3b1e.dir00\sysdata.xml

    BCCode : c0000218 BCP1 : E1A846C8 BCP2 : 00000000 BCP3 : 00000000
    BCP4 : 00000000 OSVer : 5_1_2600 SP : 2_0 Product : 768_1

    I've done all of these steps stated on a previous thread:
    http://forums.majorgeeks.com/showthread.php?t=35407


    I have attached a copy of the log files (The rest will on the next thread). Any other information you need I would be glad to provide. Any information on fixing my machine would be much appreciated.
     

    Attached Files:

  2. rallen2318

    rallen2318 Private E-2

    Not sure which files you need from MGTools.
     

    Attached Files:

  3. rallen2318

    rallen2318 Private E-2

    Here are the last 3 I could find for MGTools.
     

    Attached Files:

  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    All you needed to attach was the entire MGLogs.zip, not the individual logs.

    However, I am not seeing any malware....though you should delete all of these:
    Code:
    C:\Winodws\
    dump3aa7.tmp  Sep 14 2008       90112  "DUMP3aa7.tmp"
    dump3b72.tmp  Sep 13 2008       90112  "DUMP3b72.tmp"
    dump3b92.tmp  Sep 14 2008       90112  "DUMP3b92.tmp"
    dump3ba1.tmp  Sep 14 2008       90112  "DUMP3ba1.tmp"
    dump3bb1.tmp  Sep 14 2008       90112  "DUMP3bb1.tmp"
    dump3bef.tmp  Sep 14 2008       90112  "DUMP3bef.tmp"
    dump3fa8.tmp  Sep 13 2008       90112  "DUMP3fa8.tmp"
    dump3fa9.tmp  Sep 13 2008       90112  "DUMP3fa9.tmp"
    dump3fe7.tmp  Sep 14 2008       90112  "DUMP3fe7.tmp"
    dump3ff7.tmp  Sep 13 2008       90112  "DUMP3ff7.tmp"
    dump3ff8.tmp  Sep 14 2008       90112  "DUMP3ff8.tmp"
    dump4006.tmp  Sep 13 2008       90112  "DUMP4006.tmp"
    dump4007.tmp  Sep 13 2008       90112  "DUMP4007.tmp"
    dump4008.tmp  Sep 13 2008       90112  "DUMP4008.tmp"
    dump4009.tmp  Sep 14 2008       90112  "DUMP4009.tmp"
    dump4016.tmp  Sep 14 2008       90112  "DUMP4016.tmp"
    dump4017.tmp  Sep 14 2008       90112  "DUMP4017.tmp"
    dump4025.tmp  Sep 13 2008       90112  "DUMP4025.tmp"
    dump4026.tmp  Sep 13 2008       90112  "DUMP4026.tmp"
    dump4027.tmp  Sep 13 2008       90112  "DUMP4027.tmp"
    dump4035.tmp  Sep 13 2008       90112  "DUMP4035.tmp"
    dump4036.tmp  Sep 13 2008       90112  "DUMP4036.tmp"
    dump4037.tmp  Sep 14 2008       90112  "DUMP4037.tmp"
    dump4038.tmp  Sep 14 2008       90112  "DUMP4038.tmp"
    dump4045.tmp  Sep 13 2008       90112  "DUMP4045.tmp"
    dump4046.tmp  Sep 13 2008       90112  "DUMP4046.tmp"
    dump4047.tmp  Sep 14 2008       90112  "DUMP4047.tmp"
    dump4048.tmp  Sep 14 2008       90112  "DUMP4048.tmp"
    dump4054.tmp  Sep 13 2008       90112  "DUMP4054.tmp"
    dump4055.tmp  Sep 14 2008       90112  "DUMP4055.tmp"
    dump4056.tmp  Sep 14 2008       90112  "DUMP4056.tmp"
    dump4064.tmp  Sep 13 2008       90112  "DUMP4064.tmp"
    dump4065.tmp  Sep 13 2008       90112  "DUMP4065.tmp"
    dump4066.tmp  Sep 14 2008       90112  "DUMP4066.tmp"
    dump4067.tmp  Sep 14 2008       90112  "DUMP4067.tmp"
    dump4074.tmp  Sep 14 2008       90112  "DUMP4074.tmp"
    dump4075.tmp  Sep 14 2008       90112  "DUMP4075.tmp"
    dump4076.tmp  Sep 14 2008       90112  "DUMP4076.tmp"
    dump4083.tmp  Sep 13 2008       90112  "DUMP4083.tmp"
    dump4084.tmp  Sep 13 2008       90112  "DUMP4084.tmp"
    dump4085.tmp  Sep 14 2008       90112  "DUMP4085.tmp"
    dump4086.tmp  Sep 14 2008       90112  "DUMP4086.tmp"
    dump4093.tmp  Sep 13 2008       90112  "DUMP4093.tmp"
    dump4094.tmp  Sep 13 2008       90112  "DUMP4094.tmp"
    dump4095.tmp  Sep 13 2008       90112  "DUMP4095.tmp"
    dump4096.tmp  Sep 13 2008       90112  "DUMP4096.tmp"
    dump4097.tmp  Sep 14 2008       90112  "DUMP4097.tmp"
    dump4098.tmp  Sep 14 2008       90112  "DUMP4098.tmp"
    dump4099.tmp  Sep 14 2008       90112  "DUMP4099.tmp"
    dump409a.tmp  Sep 14 2008       90112  "DUMP409a.tmp"
    dump409b.tmp  Sep 14 2008       90112  "DUMP409b.tmp"
    dump40a2.tmp  Sep 13 2008       90112  "DUMP40a2.tmp"
    dump40a3.tmp  Sep 13 2008       90112  "DUMP40a3.tmp"
    dump40a4.tmp  Sep 13 2008       90112  "DUMP40a4.tmp"
    dump40a5.tmp  Sep 14 2008       90112  "DUMP40a5.tmp"
    dump40a6.tmp  Sep 14 2008       90112  "DUMP40a6.tmp"
    dump40a7.tmp  Sep 14 2008       90112  "DUMP40a7.tmp"
    dump40a8.tmp  Sep 14 2008       90112  "DUMP40a8.tmp"
    dump40a9.tmp  Sep 14 2008       90112  "DUMP40a9.tmp"
    dump40aa.tmp  Sep 14 2008       90112  "DUMP40aa.tmp"
    dump40ab.tmp  Sep 14 2008       90112  "DUMP40ab.tmp"
    dump40ac.tmp  Sep 14 2008       90112  "DUMP40ac.tmp"
    dump40b2.tmp  Sep 13 2008       90112  "DUMP40b2.tmp"
    dump40b3.tmp  Sep 13 2008       90112  "DUMP40b3.tmp"
    dump40b4.tmp  Sep 14 2008       90112  "DUMP40b4.tmp"
    dump40b5.tmp  Sep 14 2008       90112  "DUMP40b5.tmp"
    dump40b6.tmp  Sep 14 2008       90112  "DUMP40b6.tmp"
    dump40b7.tmp  Sep 14 2008       90112  "DUMP40b7.tmp"
    dump40b8.tmp  Sep 14 2008       90112  "DUMP40b8.tmp"
    dump40b9.tmp  Sep 14 2008       90112  "DUMP40b9.tmp"
    dump40c2.tmp  Sep 13 2008       90112  "DUMP40c2.tmp"
    dump40c3.tmp  Sep 13 2008       90112  "DUMP40c3.tmp"
    dump40c4.tmp  Sep 13 2008       90112  "DUMP40c4.tmp"
    dump40c5.tmp  Sep 14 2008       90112  "DUMP40c5.tmp"
    dump40c6.tmp  Sep 14 2008       90112  "DUMP40c6.tmp"
    dump40c7.tmp  Sep 14 2008       90112  "DUMP40c7.tmp"
    dump40c8.tmp  Sep 14 2008       90112  "DUMP40c8.tmp"
    dump40c9.tmp  Sep 14 2008       90112  "DUMP40c9.tmp"
    dump40ca.tmp  Sep 14 2008       90112  "DUMP40ca.tmp"
    dump40d1.tmp  Sep 13 2008       90112  "DUMP40d1.tmp"
    dump40d2.tmp  Sep 13 2008       90112  "DUMP40d2.tmp"
    dump40d3.tmp  Sep 13 2008       90112  "DUMP40d3.tmp"
    dump40e1.tmp  Sep 13 2008       90112  "DUMP40e1.tmp"
    dump40e2.tmp  Sep 13 2008       90112  "DUMP40e2.tmp"
    dump40e3.tmp  Sep 13 2008       90112  "DUMP40e3.tmp"
    dump40e4.tmp  Sep 13 2008       90112  "DUMP40e4.tmp"
    dump40e5.tmp  Sep 14 2008       90112  "DUMP40e5.tmp"
    dump40e6.tmp  Sep 14 2008       90112  "DUMP40e6.tmp"
    dump40e7.tmp  Sep 14 2008       90112  "DUMP40e7.tmp"
    dump40e8.tmp  Sep 14 2008       90112  "DUMP40e8.tmp"
    dump40f1.tmp  Sep 13 2008       90112  "DUMP40f1.tmp"
    dump40f2.tmp  Sep 14 2008       90112  "DUMP40f2.tmp"
    dump40f3.tmp  Sep 14 2008       90112  "DUMP40f3.tmp"
    dump40f4.tmp  Sep 14 2008       90112  "DUMP40f4.tmp"
    dump40f5.tmp  Sep 14 2008       90112  "DUMP40f5.tmp"
    dump40f6.tmp  Sep 14 2008       90112  "DUMP40f6.tmp"
    dump40f7.tmp  Sep 14 2008       90112  "DUMP40f7.tmp"
    dump4100.tmp  Sep 14 2008       90112  "DUMP4100.tmp"
    dump4101.tmp  Sep 14 2008       90112  "DUMP4101.tmp"
    dump4102.tmp  Sep 14 2008       90112  "DUMP4102.tmp"
    dump4110.tmp  Sep 13 2008       90112  "DUMP4110.tmp"
    dump4111.tmp  Sep 13 2008       90112  "DUMP4111.tmp"
    dump4112.tmp  Sep 13 2008       90112  "DUMP4112.tmp"
    dump4113.tmp  Sep 14 2008       90112  "DUMP4113.tmp"
    dump4114.tmp  Sep 14 2008       90112  "DUMP4114.tmp"
    dump4115.tmp  Sep 14 2008       90112  "DUMP4115.tmp"
    dump411f.tmp  Sep 13 2008       90112  "DUMP411f.tmp"
    dump4120.tmp  Sep 13 2008       90112  "DUMP4120.tmp"
    dump4121.tmp  Sep 13 2008       90112  "DUMP4121.tmp"
    dump4122.tmp  Sep 13 2008       90112  "DUMP4122.tmp"
    dump4123.tmp  Sep 14 2008       90112  "DUMP4123.tmp"
    dump4124.tmp  Sep 14 2008       90112  "DUMP4124.tmp"
    dump412f.tmp  Sep 13 2008       90112  "DUMP412f.tmp"
    dump4130.tmp  Sep 13 2008       90112  "DUMP4130.tmp"
    dump4131.tmp  Sep 13 2008       90112  "DUMP4131.tmp"
    dump4132.tmp  Sep 14 2008       90112  "DUMP4132.tmp"
    dump4133.tmp  Sep 14 2008       90112  "DUMP4133.tmp"
    dump4134.tmp  Sep 14 2008       90112  "DUMP4134.tmp"
    dump413f.tmp  Sep 13 2008       90112  "DUMP413f.tmp"
    dump4140.tmp  Sep 13 2008       90112  "DUMP4140.tmp"
    dump4141.tmp  Sep 13 2008       90112  "DUMP4141.tmp"
    dump4142.tmp  Sep 14 2008       90112  "DUMP4142.tmp"
    dump4143.tmp  Sep 14 2008       90112  "DUMP4143.tmp"
    dump4144.tmp  Sep 14 2008       90112  "DUMP4144.tmp"
    dump4145.tmp  Sep 14 2008       90112  "DUMP4145.tmp"
    dump4146.tmp  Sep 14 2008       90112  "DUMP4146.tmp"
    dump414e.tmp  Sep 14 2008       90112  "DUMP414e.tmp"
    dump414f.tmp  Sep 14 2008       90112  "DUMP414f.tmp"
    dump4150.tmp  Sep 14 2008       90112  "DUMP4150.tmp"
    dump415e.tmp  Sep 14 2008       90112  "DUMP415e.tmp"
    dump415f.tmp  Sep 14 2008       90112  "DUMP415f.tmp"
    dump416e.tmp  Sep 13 2008       90112  "DUMP416e.tmp"
    dump416f.tmp  Sep 14 2008       90112  "DUMP416f.tmp"
    dump417d.tmp  Sep 13 2008       90112  "DUMP417d.tmp"
    dump417e.tmp  Sep 14 2008       90112  "DUMP417e.tmp"
    dump417f.tmp  Sep 14 2008       90112  "DUMP417f.tmp"
    dump418d.tmp  Sep 13 2008       90112  "DUMP418d.tmp"
    dump418e.tmp  Sep 14 2008       90112  "DUMP418e.tmp"
    dump419c.tmp  Sep 14 2008       90112  "DUMP419c.tmp"
    dump419d.tmp  Sep 14 2008       90112  "DUMP419d.tmp"
    dump41ac.tmp  Sep 14 2008       90112  "DUMP41ac.tmp"
    dump41bc.tmp  Sep 14 2008       90112  "DUMP41bc.tmp"
    dump4268.tmp  Sep 14 2008       90112  "DUMP4268.tmp"
    dump4333.tmp  Sep 13 2008       90112  "DUMP4333.tmp"
    dump4352.tmp  Sep 13 2008       90112  "DUMP4352.tmp"
    dump444c.tmp  Sep 13 2008       90112  "DUMP444c.tmp"
    dump46ec.tmp  Sep 10 2008       90112  "DUMP46ec.tmp"
    dump471b.tmp  Sep 10 2008       90112  "DUMP471b.tmp"
    dump473a.tmp  Sep 10 2008       90112  "DUMP473a.tmp"
    dump4759.tmp  Sep 10 2008       90112  "DUMP4759.tmp"
    dump475a.tmp  Sep 10 2008       90112  "DUMP475a.tmp"
    dump4769.tmp  Sep 10 2008       90112  "DUMP4769.tmp"
    dump476a.tmp  Sep 10 2008       90112  "DUMP476a.tmp"
    dump4778.tmp  Sep 10 2008       90112  "DUMP4778.tmp"
    dump4779.tmp  Sep 10 2008       90112  "DUMP4779.tmp"
    dump4788.tmp  Sep 10 2008       90112  "DUMP4788.tmp"
    dump4798.tmp  Sep 10 2008       90112  "DUMP4798.tmp"
    dump47b7.tmp  Sep 10 2008       90112  "DUMP47b7.tmp"
    dump47b8.tmp  Sep 10 2008       90112  "DUMP47b8.tmp"
    dump47b9.tmp  Sep 10 2008       90112  "DUMP47b9.tmp"
    dump47c7.tmp  Sep 10 2008       90112  "DUMP47c7.tmp"
    dump47c8.tmp  Sep 10 2008       90112  "DUMP47c8.tmp"
    dump47d6.tmp  Sep 10 2008       90112  "DUMP47d6.tmp"
    dump47d7.tmp  Sep 10 2008       90112  "DUMP47d7.tmp"
    dump47e6.tmp  Sep 10 2008       90112  "DUMP47e6.tmp"
    dump47e7.tmp  Sep 10 2008       90112  "DUMP47e7.tmp"
    dump47e8.tmp  Sep 10 2008       90112  "DUMP47e8.tmp"
    dump47e9.tmp  Sep 10 2008       90112  "DUMP47e9.tmp"
    dump47f5.tmp  Sep 10 2008       90112  "DUMP47f5.tmp"
    dump47f6.tmp  Sep 10 2008       90112  "DUMP47f6.tmp"
    dump47f7.tmp  Sep 10 2008       90112  "DUMP47f7.tmp"
    dump47f8.tmp  Sep 10 2008       90112  "DUMP47f8.tmp"
    dump47f9.tmp  Sep 10 2008       90112  "DUMP47f9.tmp"
    dump4805.tmp  Sep 10 2008       90112  "DUMP4805.tmp"
    dump4806.tmp  Sep 10 2008       90112  "DUMP4806.tmp"
    dump4807.tmp  Sep 10 2008       90112  "DUMP4807.tmp"
    dump4808.tmp  Sep 10 2008       90112  "DUMP4808.tmp"
    dump4815.tmp  Sep 10 2008       90112  "DUMP4815.tmp"
    dump4816.tmp  Sep 10 2008       90112  "DUMP4816.tmp"
    dump4817.tmp  Sep 10 2008       90112  "DUMP4817.tmp"
    dump4818.tmp  Sep 10 2008       90112  "DUMP4818.tmp"
    dump4824.tmp  Sep 10 2008       90112  "DUMP4824.tmp"
    dump4825.tmp  Sep 10 2008       90112  "DUMP4825.tmp"
    dump4826.tmp  Sep 10 2008       90112  "DUMP4826.tmp"
    dump4834.tmp  Sep 10 2008       90112  "DUMP4834.tmp"
    dump4835.tmp  Sep 10 2008       90112  "DUMP4835.tmp"
    dump4844.tmp  Sep 10 2008       90112  "DUMP4844.tmp"
    dump4845.tmp  Sep 10 2008       90112  "DUMP4845.tmp"
    dump4846.tmp  Sep 10 2008       90112  "DUMP4846.tmp"
    dump4853.tmp  Sep 10 2008       90112  "DUMP4853.tmp"
    dump4854.tmp  Sep 10 2008       90112  "DUMP4854.tmp"
    dump4855.tmp  Sep 10 2008       90112  "DUMP4855.tmp"
    dump4863.tmp  Sep 10 2008       90112  "DUMP4863.tmp"
    dump4864.tmp  Sep 10 2008       90112  "DUMP4864.tmp"
    dump4865.tmp  Sep 10 2008       90112  "DUMP4865.tmp"
    dump4872.tmp  Sep 10 2008       90112  "DUMP4872.tmp"
    dump4873.tmp  Sep 10 2008       90112  "DUMP4873.tmp"
    dump4874.tmp  Sep 10 2008       90112  "DUMP4874.tmp"
    dump4875.tmp  Sep 10 2008       90112  "DUMP4875.tmp"
    dump4876.tmp  Sep 10 2008       90112  "DUMP4876.tmp"
    dump4892.tmp  Sep 10 2008       90112  "DUMP4892.tmp"
    dump4893.tmp  Sep 10 2008       90112  "DUMP4893.tmp"
    dump48a1.tmp  Sep 10 2008       90112  "DUMP48a1.tmp"
    dump48a2.tmp  Sep 10 2008       90112  "DUMP48a2.tmp"
    dump48b1.tmp  Sep 10 2008       90112  "DUMP48b1.tmp"
    dump48b2.tmp  Sep 10 2008       90112  "DUMP48b2.tmp"
    dump48d0.tmp  Sep 10 2008       90112  "DUMP48d0.tmp"
    dump48e0.tmp  Sep 10 2008       90112  "DUMP48e0.tmp"
    dump48ff.tmp  Sep 10 2008       90112  "DUMP48ff.tmp"
    dump4900.tmp  Sep 10 2008       90112  "DUMP4900.tmp"
    dump4901.tmp  Sep 10 2008       90112  "DUMP4901.tmp"
    dump490f.tmp  Sep 10 2008       90112  "DUMP490f.tmp"
    dump4910.tmp  Sep 10 2008       90112  "DUMP4910.tmp"
    dump492e.tmp  Sep 10 2008       90112  "DUMP492e.tmp"
    dump493e.tmp  Sep 10 2008       90112  "DUMP493e.tmp"
    dump49f9.tmp  Sep 10 2008       90112  "DUMP49f9.tmp"
    dump4a57.tmp  Sep 10 2008       90112  "DUMP4a57.tmp"
    dump4a95.tmp  Sep 10 2008       90112  "DUMP4a95.tmp"
    dump4a96.tmp  Sep 10 2008       90112  "DUMP4a96.tmp"
    dump4af3.tmp  Sep 10 2008       90112  "DUMP4af3.tmp"
    dump4cd7.tmp  Sep 10 2008       90112  "DUMP4cd7.tmp"
    dump4f87.tmp  Sep 13 2008       90112  "DUMP4f87.tmp"
    dump4f97.tmp  Sep 13 2008       90112  "DUMP4f97.tmp"
    dump50df.tmp  Sep 10 2008       90112  "DUMP50df.tmp"
    dump512d.tmp  Sep 10 2008       90112  "DUMP512d.tmp"
    dump518b.tmp  Sep 14 2008       90112  "DUMP518b.tmp"
    dump51aa.tmp  Sep 14 2008       90112  "DUMP51aa.tmp"
    dump51e8.tmp  Sep 14 2008       90112  "DUMP51e8.tmp"
    dump540b.tmp  Sep 10 2008       90112  "DUMP540b.tmp"
    
    Tell me what issues you are having now.....I am assuming that the hard drive is back in the computer and booting up.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds