Is This Laptop Clean?

krispyro · Jul 18, 2017

Fixing a friends laptop and wanted to see if it was clean from virus's and malware. I have completed read me first and will be attaching all logs as it was explained. i will attach mg logs on my next post.

TimW · Jul 18, 2017

Nothing in the way of malware.....just some junk.

Remove everything MBAM found.

Rerun RogueKiller and remove these items:

¤¤¤ Registry : 11 ¤¤¤
[PUP.Tific] (X86) HKEY_LOCAL_MACHINE\Software\Tific -> Found
[PUP.Tific] (X64) HKEY_USERS\S-1-5-21-64514042-3756929590-1688801608-1000\Software\Tific -> Found
[PUP.Tific] (X86) HKEY_USERS\S-1-5-21-64514042-3756929590-1688801608-1000\Software\Tific -> Found

¤¤¤ Files : 2 ¤¤¤
[PUP.Tific][Folder] C:\Users\Ni\AppData\Roaming\Tific -> Found
[PUP.Tific][Folder] C:\Users\Ni\AppData\Local\Tific -> Found

Rerun Hitman and remove these three items:

Potential Unwanted Programs _________________________________________________

HKLM\SOFTWARE\Classes\Interface\{6E780F0B-BCD6-40CB-B2DB-7AF47AB4D4A4}\ (CouponBar)
HKLM\SOFTWARE\Classes\Interface\{A138BE8B-F051-4802-9A3F-A750A6D862D4}\ (CouponBar)
HKLM\SOFTWARE\Classes\s\ (Softonic)

Reboot and rescan with RogueKiller and Hitman and attach the new logs.

krispyro · Jul 18, 2017

here is mglogszip. This is the only one i could locate inside mg tools . i will go ahead and rerun programs as instructed.

krispyro · Jul 18, 2017

here is the additional scans.

TimW · Jul 18, 2017

You still have this file to remove from RogueKiller:

¤¤¤ Files : 1 ¤¤¤
[PUP.Tific][Folder] C:\Users\Ni\AppData\Local\Tific -> Found

krispyro · Jul 18, 2017

ok i deleted it, rebooted and will post the newest scan.

TimW · Jul 18, 2017

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.

Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.

Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.

If running Vista, Win 7 or Win 8 or 10, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

krispyro · Aug 17, 2017

Finally getting back to this laptop. All seems to be working well. Thank you Tim W. And everybody else.

TimW · Aug 17, 2017

You're welcome.

krispyro · Aug 17, 2017

I just found out that windows defender will not turn on. It says its turned off by group policy. I know its not the best but it is still helpful. Any ideas to turn it on?

TimW · Aug 17, 2017

That is a topic you should pursue in the software forum.

krispyro · Aug 17, 2017

ok will do. thanks again.

TimW · Aug 17, 2017

No problem.....good luck.

Log in or Sign up

Is This Laptop Clean?

krispyro Private E-2

Attached Files:

AdwCleaner[C0].txt

HitmanPro_20170718_1140.log

mwblog.txt

RKlog.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

krispyro Private E-2

Attached Files:

MGlogsR.zip

krispyro Private E-2

Attached Files:

HitmanPro_20170718_2020.log

rklog.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

krispyro Private E-2

Attached Files:

rk3log.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

krispyro Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

krispyro Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

krispyro Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Is This Laptop Clean?

krispyro Private E-2

Attached Files:

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

krispyro Private E-2

Attached Files:

krispyro Private E-2

Attached Files:

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

krispyro Private E-2

Attached Files:

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

krispyro Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

krispyro Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

krispyro Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Useful Searches