Malware Problem - Request for help (logs attached)

Hi

Firstly thanks for all the advice on malware removal on the board. It has been a great help.

However I still have a persistent problem and I wonder if someone can help.

I followed the procedures and the logs are attached. As I wasn't able to post to board until now I've also used findykill and those logs are attached also.

Here is an outline of what happened:

- On tuesday I tured on my laptop for the first time in 6 weeks. I used it for some emails and then shutdown. Before this it had always worked perfectly and was very quick. Windows downloaded its patches when I shutdown.
- The next day when I turned the machine on it got stuck in a loop as it reached the desktop. I had to do a hard reset several times to end the loop and eventually it got through to the desktop.
- There was obviously a problem and the CPU was 100 per cent before any apps had been started. Looking at my taskmanager I thought that there might be a conflict between Rapport (banking software) and F-Secure so I removed Rapport and disabled F-Secure. This didn't help.
- It was at this point I realised that my keyboard was partially disabled and it has been ever since. I am typing this in SAfe Mode. Also the CPU is stuck at 100 per cent all the time though again not in SAfe Mode.
- I then ran F-Secure and it found bagle and gemini but didn't clean it.
- I then downloaded Kasperky and ran that. It found about a dozen infections cleaning 8 of them. The other 4 I deleted or in the case of system restore I turned off.
- The problems of the disabled keyboard and 100 per cent CPU remained. The keyboard would nearly always work for the first 30 seconds after start up and then very periodically after that or sometimes complete nothing.
- I contacted F-Secure support who ran several scans of my computer. These found nothing though it did find and clean bagle in between scans.
- I then followed the procedures on the board and the logs are attached.
- As I wasn't able to post due to the keyboard not working after my four scans (which ran successfully) I uninstalled firefox completely and turned off the hibernation function to remove that respective file as I had seen these come up in the logs.
- The issues remained so I ran Findy Kill research and deletion and the logs for those are attached.
- After running Findy Kill the machine feels more precarious than ever as on start up and shutdown it hangs on the blue screen for a long time (2 to 3minutes) and I fear the blue screen of death. I am tempeted to do a sytem restore.
- It was at this point I remembered that the recovery console had been downloaded and booted up safe mode with networking which seems to work fine. Both keyboard and CPU are normal here. I've been back to normal mode though and the problems still remain.

Any advice in getting the machine back to normal would be most appreaciated.

best wishes

Richy Rich

 

Here are the remaining logs. Apologies for lack of clarity on the naming of the files but with the keyboard not working it wasn't possible to always names them accurately.

thanks again in advance for your help.

Rich

 

Thanks for your welcome chaslang.

Missing MG tools log is attached.

Yes, I followed the READ & RUN ME FIRST. Malware Removal Guide. However since I wasn't able to post my logs I went a little further with Findy Kill and removed a few files myself.

Current problems are (in normal mode):

- Keyboard does not work. This is either completely or one character every 5-10 minutes or so. However after start up I can probably get a dozen characters out on notepad before it is disabled.

- CPU stuck at 100 per cent or near 100 per cent from start up.

- Hangs on blue screen at start up and shutdown. (This is not a problem, more a concern.)

Thanks again

Rich

 

Thanks very much for your time and efforts Chaslang.

It is helpful to know that I have a clean bill of health.

I fear in my initial efforts to eradicate the malware I may have damaged the registry and/or system files and I may now have to re-format my C drive.

Thanks again and best wishes.

Rich