ASK and MusicBoxToolbar, Torch Crash Handler

Discussion in 'Malware Help (A Specialist Will Reply)' started by bricht, Jun 16, 2014.

  1. bricht

    bricht Private E-2

    Please help me get rid of these and anything like them!
     

    Attached Files:

  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    MGTools did not run to completion.

    Rerun both RogueKiller and Hitman and have them fix everything they found.

    Reboot and rescan with both Hitman and RogueKiller and attach the new logs.

    Then run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).Make sure that you watch for the license agreement for TrendMicro HijackThis and click on the Accept button TWICE to accept ( yes twice ).
    Then attach the below logs:

    * C:\MGlogs.zip
    Make sure you tell me how things are working now!
     
  3. bricht

    bricht Private E-2

    Hitman Pro ran fine and seemed to delete what it found.

    RogueKiller ran and found one malware which it STOPPED. I selected it by left clicking on it (highlighted it) then hit 'delete'. It said deletion complete, but the malware was still visible in the box below (maybe it's supposed to be, I don't know). Also when I move to the registry tab, I tried to select all by right clicking on the top 'dot', then clicking the select all option. But it refuses to select all so I can't delete. Even if I try and delete one line, it doesn't let me. The delete button is greyed out since nothing is selected.

    Was I supposed to download HijackThis? Didn't see any license agreement for TrendMicro HijackThis when I ran MGtools as administrator.

    Thanks for helping!
     

    Attached Files:

  4. bricht

    bricht Private E-2

    Update! I don't know exactly what I did, but after trying to uninstall some of the Music Toolbar programs that were already uninstalled, it asked if I wanted to remove whatever traces were left (my words) and so I said yes. I then rebooted, ran Rogue Killer and was able to select and delete all the items in the Registry tab. Still no luck with the Processes tab: Torch Crash Handler is still there with a status of STOPPED.

    I reran C:\MGtools\GetLogs.bat and got the TrendMicro HijackThis window. It only let me click on Accept once, but it seems to have worked.

    How do I delete Torch Crash Handler?
     

    Attached Files:

  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I am not finding any malware. Please use windows explorer to find and delete:
    C:\ProgramData\TorchCrashHandler

    Tell me what issues remain, if any.
     
  6. bricht

    bricht Private E-2

    I deleted TorchCrashHandler, downloaded the latest version of RogueKiller, ran it, and walla! All clean. :-D

    Thanks a lot for all your help, Tim (and all the other MajorGeeks experts). You guys are great!
     
  7. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You're welcome.

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. If you are running Win 8, Win 7, Vista, Windows XP or Windows ME, do the below to flush restore points:
      • Refer to the instructions for your WIndows version in this link: Disable And Enable System Restore
      • What we want you to do is to first disable System Restore to flush restore points some of which could be infected.
      • Then we want you to Enable System Restore to create a new clean Restore Point.
    8. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds