I am Still having problems after running all scans in readme

Discussion in 'Malware Help (A Specialist Will Reply)' started by a49ers4009, Oct 18, 2010.

  1. a49ers4009

    a49ers4009 Private E-2

    I have ran all of the scans as asked in the Readme first forum and i still have the problem of windows being really sluggish and taking a long time to load up.
     

    Attached Files:

  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Currently reviewing your logs and will post a response ASAP. :)
     
  3. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    I am not seeing a whole lot to do. Your issues maybe more suited for the software forum to further discuss. However let's so what we can here:

    Uninstall these outdated versions of Java

    • Java(TM) 6 Update 5
    • Java(TM) 6 Update 7

    Update Malware BYtes by opening up the program, using the update tab > rescan > fix anything it finds and attach the log regardless.

    Now was there any particular reason why you did not run Combofix?

    Use windows explorer to find and delete this folder:
    • C:\Users\Danica\AppData\Local\mskglgbry

    Now run Ccleaner. Only use the Run Cleaner button. Do not run anything else on any other forms.

    Reboot your machine and install the most current and up to date version of Java available here at the below link:

    Java Runtime 6

    You can give combofix a run if you like so we can cover all angles. (It sometimes finds things that do not stand out in the other logs)

    If you do, afterwards do this:

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file that will be created by running this.
     
  4. a49ers4009

    a49ers4009 Private E-2

    Here are those logs.
     

    Attached Files:

  5. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Well combofix found a bit of vundo and dealt with it. It also deleted some files which we need to restore.

    • C:\Qoobox\Quarantine\C\Windows\system\BisonC07.dll.vir
    • C:\Qoobox\Quarantine\C\Windows\System32\Twain.dll.vir
      [*]
    Navigate to the above files, rename them to disinclude the .vir extension and then place them back into their original locations as shown below:
    • C:\Windows\system\BisonC07.dll
    • C:\Windows\System32\Twain.dll

    Now Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file that will be created by running this.

    Things running okay for you?
     
  6. a49ers4009

    a49ers4009 Private E-2

    Things are still taking a long time to start up still. But i did get the successful message
     

    Attached Files:

  7. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Run Ccleaner.

    You can use a start up manager to control what loads when you start windows, maybe that will free up some resources.

    Here is an example

    Startup CPL 2.8

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /uninstall
        • Notes: The space between the combofix" and the /uninstall, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    3. Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    7. Go to add/remove programs and uninstall HijackThis.
    8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
      related to MGtools and some other items from our cleaning procedures.
    9. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 7 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    10. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds