Computer issues- PLEASE HELP

Discussion in 'Malware Help (A Specialist Will Reply)' started by bras33, Dec 1, 2013.

  1. bras33

    bras33 Private E-2

    Hello, I did a big mistake. I wanted the microsoft office 2013 so bad that I download a program to unlock it for free. I don't remember the name of the program but is was a torrent. My laptop started to get slow and after searching for the culprit I knew it was this program. So I uninstall it from my computer but nothing changed. I scanned with Avast but it found nothing. Finally I did a boot time scan and it found a rootkit and avast deleted it (I wish). I re-did the boot time scan but it found nothing. But the computer is still in the same state. If someone is kind enough to check my logs I'll be greatful. And also the thing that bugs me is that even though I deleted the program microsoft office did not return to trial mode, it's 100% unlocked. Please help me, I have learned my lesson. Thank you.
     

    Attached Files:

  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    What are these?
    • C:\ProgramData\Microsoft\Windows\Start Menu\744a~1.lnk
    • C:\ProgramData\Microsoft\Windows\Start Menu\Programs\66EB~1
     
  3. bras33

    bras33 Private E-2

    Hello, I have no clue. I went to check them out but they don't even appear. Are they some kind of malware?
     
  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Not malware per se, just bits of garbage by the looks, but they can go:

    Download and run OTM.

    Download OTM by Old Timer and save it to your Desktop.


    Code:
    :Processes
    explorer.exe
    
    :files
    C:\ProgramData\Microsoft\Windows\Start Menu\744a~1.lnk
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\66EB~1
    :Commands
    [emptytemp]
    [Reboot]
    • Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
    • Push the large http://farm3.static.flickr.com/2782/4174320048_f01c448b32_o.png button.
    • OTM may ask to reboot the machine. Please do so if asked.
    • Copy everything in the Results window (under the green bar), and paste it into notepad, save it as something appropriate and attach it into your next reply.

    NOTE: If you are unable to copy/paste from this window (as will be the case if the machine was rebooted), open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTM\MovedFiles folder, and open the newest .log file present, and attach the contents of that document back here in your next post.


    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista, Windows7 or Win8) Then attach the new C:\MGlogs.zip file that will be created by running this.

    Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now!
     
  5. bras33

    bras33 Private E-2

    Hello, ever went smoothly. The logs are attached. But do I have some kind of infection? I am worried
     

    Attached Files:

  6. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Hello there. :)

    Those items deleted smoothly as you say. Everything looks good to me, I am seeing no signs of a rootkit. Your antivirus no longer reports anything like this I presume?
     
  7. bras33

    bras33 Private E-2

    No nothing. But the microsoft office is still fully unlocked even though I completely removed the program, that is what worries me. But if you say there is nothing I trust you.
     
  8. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    So all these products have not been paid for?

     
  9. bras33

    bras33 Private E-2

    Hello, I don't know about all those programs but the Microsoft Office Professional 2013 is fully unlocked and I did not pay for it even though I uninstall the program.
     
  10. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Microsoft Office Professional Plus 2013 <<< This? This is still installed. Use Revo Uninstaller to remove any products you did not pay for, and let me know how you get on.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds