maleware or virus blocking ALL security functions

Discussion in 'Malware Help (A Specialist Will Reply)' started by crimsonarc, Nov 11, 2009.

  1. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You should be able to just select to uninstall it and it should say it is already uninstall and offer to remove the entry. If that does not work, use the below reg patch.


    Copy the bold text below to notepad. Save it as fixme.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.


    In your router.

    No! It tells you the Windows firewall is inadequate.

    We don't really know for sure. If it had been plugged in while doing all of the scans, some of them would have check for problems on it. You will have to finish getting your PC protected and just plug it in. Then run a few scans (like antivirus, SUPERAntiSpyware, and Malwarebytes on it).
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Unless you purchase SUPERAntiSpyware, it is not providing any active protection. It is only an after the fact scanner, same goes for MBAM.


    Your problem with Microsoft Malicious Software Removal Tool, may have to be posted in the Software Forum since there are many many reasons for problems with Microsoft Update most of which are not malware.;) But you can also try manual installation by downloading the below and running it locally. I suggest that you shutdown all protection before running it.

    Microsoft Malicious Software Removal Tool
     
  3. crimsonarc

    crimsonarc Private E-2

    in terms of the - fixme.reg - for the HighjackThis that you asked me to add to registry, yes there was a success window that confirmed it had been added to the registry.
     
  4. crimsonarc

    crimsonarc Private E-2

    got a bluescreen error and computer shut down and restarted around 9:00pm PST. said in the error report that windows shut down unexpetedly. should I not be using my computer during this back and forth of your helping me such as doing regular surfing or using other websites? is the - fixme - item on my desktop needing to be addressed first? or should I just put it down to " one of those things " ? ( I suppose windows like anything can get overwhelmed at times ? - watching videos for example ).
     
  5. crimsonarc

    crimsonarc Private E-2

    just read an article on bbc news about microsofts ' black screen of death ' for people using windows 7 , ( does affect users of vista an other systems also )it is apparently a kind of system crash caused by windows latest security update form around nov 25 this year. it is similiar to the blue screen crash problem but the entire screen goes black after logging on. I did have this problem just before you started helping me so that security update could be the or ' a ' problem. people have resorted to re-loading their entire windows system, but your help corrected that for me, now I'm wondering how long it might yake for that pesky update to cause more problems if it is a problem. any way to stop a windows update? just thought I'd let you know in case it might be of value to you.
     
  6. crimsonarc

    crimsonarc Private E-2

    got hit with another bluescreen again just now. windows search index stopped working. there is an optional update for something called - silverlight - from microsoft ready to be installed on my computer. but it had a long process of looking at and agreeing to terms and conditions. part of that was I had to pay microsoft? sounds a little iffy. go ahead with the download anyway?
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If you keep posting additional messsages, you are bumping your thread and will never get an answer. See this sticky thread: Don't Bump! It Only Hurts You!!!

    You need to post 1 message and then wait until we can get back to you. Example, Message 53 should have been the last message you posted.

    The only thing you should be doing is what we request and nothing else until we are finished.

    Don't even reply to this message since it will only add more delay.
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    During fixes it is best to do only what is requested but we do realize that people need to use their PCs for many reasons. Thus, we suggest that you limit what you do to necessary surfing and just do not install, uninstall, download....etc anything we do not request (not even updates for any software) so that your system does not change that much. Only what we ask you to do should be changing things and we know what those changes will be and can deal with it.

    Not sure what you meant by the fixme.reg needing to be addressed. It is just a simple registry patch to remove the HijackThis entry from Add/Remove Programs.

    Are you currently having any malware problems? If so, exactly what.


    About the Black Screen of Death issue, you may wish to read the below since it may give you more correct info:

    http://www.theregister.co.uk/2009/12/02/black_screen_u_turn/

    And also the below:

    http://www.prevx.com/blog/140/Black-Screen-woes-could-affect-millions-on-Windows--Vista-and-XP.html
     
    Last edited: Dec 7, 2009
  9. crimsonarc

    crimsonarc Private E-2

    am I currently having any maleware problems? well lets see,... my computer completely crashed after one blue screen error and then a second one while watching a movie online using DivX ( the dell laptop seemed to be at the end of its operating capacity - what is DivX, a resource hog?) and then I could not get the computer to restart or go beyond startup repair. I could not use any of the startup options to go anywhere and windows said it could not fix the problem automatically and the memory test said i have hardware damage to contact the manufacturer. I could not do a system restore even though i had created one just the day before, I could not reset dell factory image settings or factory original state and I dont have a backup disc for that dell laptop. I understand that I can reload windows but if the problem is in the hardware reloading may not address the problem.

    I was able to write down the two blue screen errors if that helps :

    ( first one ) : stop 0x0000001a - included in the first blue screen error was : bad pool header // ( second one ) : stop 0x00041790 0xC08017B2 0x0000FFFF 0x00000000.

    so essentially the advice you gave me and I followed corrected my previous maleware problems but I went to watch a movie online and the entire computer has stopped working. either i did something wrong or the highjackthis removal from the registry or attempt to do so caused an unforseen registry issue affecting my computer. or there was something else that was not noticed.

    my question now is can the dell laptop we were working on be recovered beyond the startup repair sequence from something you can tell me, all I have left is command prompt on the startup repair options list ( I'm typing to you on a friends computer ). I dont want to chance spending money reloading windows because of the hardware issue notification ( some kind of conflict ? ) may be more serious and reloading wont work.

    the biggest issue for me is the USB with all my pics and text documents. I need to use it but need to be sure that they are safe to use on my friends computer, the computer I've been lent is an HP pavillion with norton. and he advised that I download spybot search and destroy and CCleaner to scan the USB then it should be alright, is that about right?
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    This is not likely to be a malware problem. Especially DivX. You should post about these in the Software Forum and for crashes you need to provide the exact error messages and also it would be best to attach a log from Event Viewer ( see http://technet.microsoft.com/en-us/library/cc766401(WS.10).aspx )

    Again you will need to post about this in another forum providing the exact details of the messages ( don't leave anything out and write it exactly as it appears without interjecting your own comments ). If you are really having hardware problems, the Hardware Forum would be more correct than the Software Forum. This could even be a driver error or software conflict.

    Removing that dead entry for HijackThis would not cause any problems. Your logs had been clean for awhile and your PC was basically running okay other than some permissions issues. Deleting a single registry key in a totally non-required location, would not change how things are working. Something else had to have happened. However watching a movie online has been known to cause many problems especially if any special drivers/players needed to be downloaded/installed to watch. Even an update to any tools that were already installed ( like DivX ) could cause problems. And also many websites can be problematic too.

    If you cannot boot into Windows at all then there are not too many options left other than possibly try to use a Vista Boot DVD to perform a repair; however, it would be worthwhile posting in the Software Forum to see if anyone has additional ideas.


    I cannot give you an honest answer on this since we have not scanned it. The problems that you had are not known to spread infections to USB drives so in all likelihood it is not going to be a problem.
     
  11. crimsonarc

    crimsonarc Private E-2

    thank you for your time, the dell we were working on was maleware repaired but another issue came up and thats it for the computer for now, I'll go to another forum and see what they have to say. very good service for an online resource and thanks again. as I understand it, this is the end of this thread.
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.


    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /uninstall
        • Notes: The space between the combofix" and the /uninstall, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    5. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    6. Go to add/remove programs and uninstall HijackThis.
    7. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    8. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 6 of the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    9. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds