Computer slow and folders locked

Discussion in 'Malware Help (A Specialist Will Reply)' started by twmcm, Oct 16, 2013.

  1. twmcm

    twmcm Private E-2

    Hi my computer has been runnibg slow for a while, and recently have not been able to delete programs etc, and there are a few folders locked, and I cant gain entry to them I have run the Malware removal and include the logs here.
    Hope you can help
     

    Attached Files:

  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Double-click RogueKiller.exe to run. (Vista/7 right-click and select Run as Administrator)
    When it opens, press the Scan button
    Now click the Files/folders tab and locate these detections:


    • [ZeroAccess][Folder] U : F:\Windows\Installer\{a7792e09-9679-371f-532a-9c6c2569f827}\U [-] --> FOUND

    Place a checkmark each of these items, leave the others unchecked.
    Now press the Delete button.

    Now rerun Hitman and have it remove everything under:
    Potential Unwanted Programs

    Download OTM by Old Timer and save it to your Desktop.




    Code:
    :Processes
    explorer.exe
    :Files
    F:\Windows\SysWOW64\drivers\bjljtra.sys
    F:\Windows\SysWOW64\drivers\bynyzkpk.sys
    F:\Windows\SysWOW64\drivers\jgbwy.sys
    F:\Users\Tommy\AppData\Local\Temp\*.*
    :Commands
    [purity]
    [ResetHosts]
    [emptytemp]
    [start explorer]
    [Reboot]

    • Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
    • Push the large http://farm3.static.flickr.com/2782/4174320048_f01c448b32_o.png button.
    • OTM may ask to reboot the machine. Please do so if asked.
    • Copy everything in the Results window (under the green bar), and paste it in your next reply.


    Now navigate to the C:\_OTM\MovedFiles folder ( assuming your Windows drive is C). This is where your log will be saved in the form of Date and Time mmddyyyy_hhmmss.log. Just look for the most recent .log file. Attach this log file to your next message.

    Reboot and rescan with both RogueKiller and Hitman and attach those logs as well.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

    Attach the new C:\MGLogs.zip
     
  3. twmcm

    twmcm Private E-2

    Hi hope I completed that ok.
    There was no sign of the Zero access notification this time after running RogueKiller.
    Thanks
     

    Attached Files:

  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    How are things running now?
     
  5. twmcm

    twmcm Private E-2

    Hi sorry was away yesterday could not reply, Seems to be running a bit faster,
    Still have some folders locked.
    Recycle bin
    Documents and Settings
    Sandbox
    AllUsers
    Default users (you dont currently have permission to access this folder)
    Tommy (my files)
    Internet always defaults to open in MSN no matter if I reset default to google.
    tried to delete it but cant find msn files.
    Was internet today and a lot of google pages it says google is not responding.
    Thanks for your help
     
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I suggest you pursue those issues in the software forum. Your logs are clean.

    If you are not having any other malware problems, it is time to do our final steps:

    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. If you are running Win 8, Win 7, Vista, Windows XP or Windows ME, do the below to flush restore points:


    After doing the above, you should work thru the below link:

     
  7. twmcm

    twmcm Private E-2

    Thanks for all your help will do as you said and go to the software section to see if I can iron out the other issues thanks again.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds