Lots of Malware

fallendowncantgetup · Jan 6, 2009

Hi I was asked to look at this system as it wouldn't boot up. You would get into windows but get the userinit.exe error and it'd be stuck on only the desktop.

I restored to the last restore point and it booted but still had some problems, rundll32 was giving the same error sometimes etc and i'd have my computer open then it'd close on its own. So I ran all the scans and removed alot of stuff mostly vundo and it seems to be okay now but i'm not sure as Avasts resident program did report 4 instances of "Sign of Win32:VunDrop" found in bla bla" so deleted those but so far havn't had anything else happen.

So here's my logs from the scans to make sure something wasn't missed and is just gonna come back before i cycle the restore point.

fallendowncantgetup · Jan 6, 2009

mg log

TimW · Jan 9, 2009

Yes...I can see part of the problem, though it isn't malware as your logs are clean.
Code:
Total Physical Memory    256.00 MB    
Available Physical Memory    74.99 MB
We suggest a minimum of 512....and you actually should be running 1 gig!

If you are not having any other malware issues, then:

We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection, but are effective as backup scanners. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Delete the C:\combofix folder from combofix (if it exists)

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Click to expand...

Log in or Sign up

Lots of Malware

fallendowncantgetup Private E-2

Attached Files:

ComboFixlog.txt

Malwarebytes Anti-Malware log.txt

SASlog.txt

fallendowncantgetup Private E-2

Attached Files:

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member