Suspected Malware (cont'd)

Laure let me know that some how your account got deleted. Sorry about that. I have no idea how it happened. Some may have mistaken your unusual user name as a spammer's name since that will use very strange names.

( NOTE: You cannot reply to her PM as you do not have enough posts to PM )

I merged in your logs from your previous thread to the new thread to make it easier for all of us.

I will also quote below your original problem statement and my reply to keep eveything in this new thread now.

 

Did your problems begin a little after installing Sendori ? I see you just installed around Oct 29th,

Code:

d-----w                 0 2012-10-29 08:04:14  C:\ProgramData\Sendori

 

You're welcome.

You or someone else using the PC installed it. It does not come with Daemon Tools.

I suggest that you start by uninstalling the below ( the Java version is just old and you have the current version already):

Coupon Printer for Windows
Java(TM) 6 Update 31
Sendori

and then immediately reboot. After the reboot, tell me how things are working.

Not an inconvenience. I just wanted to let you know a possible reason how your account got deleted. It looks too much like typical spam accounts we get late at night.


Also so that we can check to make sure that Sendori actually fully uninstalled ( I have seen reports that it does not ), please run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

• C:\MGlogs.zip

 

Possibly related to all the stuff you installed from IObit like:
IObit\Smart Defrag 2
Advanced SystemCare 6
IObit Malware Fighter

You could try uninstalling them to see if they are at the heart of your lag.

If you are not having any other malware problems, it is time to do our final steps:

1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. You can uninstall RogueKiller and HitManPro.
3. Go back to step 4 oof the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
6. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
7. Go to add/remove programs and uninstall HijackThis.
8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
   related to MGtools and some other items from our cleaning procedures.
9. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
   • Refer to the cleaning procedures pointed to by step 6 of the READ ME
     for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore to create a new clean Restore Point.
10. After doing the above, you should work thru the below link:
    • How to Protect yourself from malware!