Malware – DWGR12S – 2010.08.20

Dr. K.D.J.H. Manilka Jayawardena,
Medical Officer,
National Tuberculosis Reference Laboratory (Central Laboratory of NPTCCD),
Chest Hospital Premises,
Welisara.
Sri Lanka.
Friday, 20th August 2010.​

Dear MajorGeeks Forum,

Malware – DWGR12S – 2010.08.20​

None of your scanners were installed in this computer before, and since last week, this Computer’s Startup became very slow.

The following message also appears on Startup.

Failed to connect to a Windows service
Windows could not connect to the System events Notification Service service. This problem prevents limited users from logging on to the system. As an administrative user, you can review file system Event Log for details about why the service didn’t respond.

• Also Installation of StartupCPL failed

• No Internet Connection is indicated and cannot Update SAS or any other scanner but on clicking the icon there is connectivity.

• Unable to run Disk Defragmenter or Install Disk Keeper Lite stating Administrative privileges are not available even though this is the Administrator account

I have run READ & RUN ME FIRST- Malware Removal Guide to make sure there are no Malware. The relevant logs are attached.
The RootRepeal did not run as it suddenly closes in the middle of the scan on Normal Startup Mode and Safe Mode.

Please advice on further action.

Thanking you.​

Yours Sincerely,
Manilka​

:confused

 

Dear Kestrel13!
Malware Fighter – Major Dilemma,

Malware – DWGR12S – 2010.08.20​

The above computer is used for laboratory work. We have made backups in case there is loss of laboratory information or client information. Therefore you are free to do anything as we are trying to salvage the computer without formatting it. This Computer’s Startup is still very slow. The following message also still appears on Startup.

• Failed to connect to a Windows service
“Windows could not connect to the System events Notification Service service. This problem prevents limited users from logging on to the system. As an administrative user, you can review file system Event Log for details about why the service didn’t respond.”

• Also Installation of StartupCPL failed

• No Internet Connection is indicated and cannot Update SAS or any other scanner but on clicking the icon there is connectivity. Using the repairs tab in SUPERantispyware, use the Repair broken Network Connection (WinSock LSP Chain) option also failed to establish the Internet connection. On running the wireless Internet, it indicates the message “Network Connection Prompt: Connection terminated”.

• Unable to run Disk Defragmenter or Install Disk Keeper Lite stating Administrative privileges are not available even though this is the Administrator account

A message appears that The COMODO Antivirus is turned off even though the programme indicates it is functioning normally and up-to-date even though its last update on 10th August 2010.

The RootRepeal did not run as it suddenly closes in the middle of the scan on Normal Startup Mode and Safe Mode.

When trying to update SuperAntiSpyware it indicates it is up-to-date even though its main screen does not indicate any update since installation.

I have run READ & RUN ME FIRST- Malware Removal Guide to make sure there are no Malware. The relevant logs were attached previously. I wonder whether all these problems are due to Malware.

Please advice on further action.

By the way, Sri Lanka is a nice country to live in especially after getting rid of the terrorist. The only problem is its people do not know to live with what they get and the politicians want and get what they should not have.

Thanking you.​

Yours Sincerely,
Manilka​