Malware help - moved thread

Mwcats · Mar 16, 2015

I started a thread and posted the scan results asked for and received a message that my post should be here. Here is the original thread (titled Windows Repair pre-repair log) with the scan results:

http://forums.majorgeeks.com/showthread.php?t=291340

I have since been able to download Malwarebytes by using Chameleon and ran it - it found no Malware.

I also didn't post the TDSS results as it also did not find anything. I have done nothing else or tried to fix anything per instructions.

Thanks for any help!

chaslang · Mar 16, 2015

Your problems may not be due to malware, but I see some junk to cleanup so let's take care of this and see what happens.

Rerun Hitman Pro and the allow it to cleanup all the Malware remnants and Potential Unwanted Programs that it reported. Reboot immediately after.

After reboot please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.

The tool will open and start scanning your system.

Note: That JRT may reset your home page to a google default so you will need to restore your home page setting if this happens.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Attach JRT.txt to your next message.

How is your PC working now?

Mwcats · Mar 17, 2015

Thank you chaslang, appreciate your looking at this. And, fingers crossed, maybe it isn't malware.

Here is the log text from JRT you asked for. I will have to play with the computer for a day or so to see how it is running. I was mostly having trouble getting Windows Updates to configure and the computer to recognize me as the new owner/administrator. Will have to see how that is working.

Again thanks!

Mwcats · Mar 17, 2015

I have been on the computer and things seem to be going well in general. I am still having a problem though with Windows Updates not configuring. They download and install ok but then won't configure. Right now this seems to be my main problem along with I have to repeatedly take ownership of files to access them even though I have changed the owner in the registry and am the only account (default administer) on the computer right now.

Does this post belong here or do I need to go back to software forum?

Thanks for all your help.

chaslang · Mar 17, 2015

You're welcome.

Mwcats said: ↑

Does this post belong here or do I need to go back to software forum?
Click to expand...

Back to the Software Forum but you can first try running the below with Windows Repair that you already have.

Be patient while doing the below. The fixes can sometimes take quite awhile to run. Especially the permissions repairs. It may be best to kick it off and goto bed or do something else. It is better not to run anything while the repairs are going on.
Download Windows Repair by Tweaking.com and unzip the contents into a newly created folder on your desktop.

Now run Repair_Windows.exe by double clicking on it ( if you are running Vista or Win 7, use right click and select Run As Administrator)

Now select the Start Repairs tab.

The click the Start button.

Create a System Restore point if prompted.

On the next screen, click the Unselect All button to first deselect all repairs.

Now select the following repair options:

Reset Registry Permissions

Reset File Permissions

Register System Files

Remove Policies Set By Infections

Repair Windows Updates

Now on the lower right side check the box to Restart/Shutdown System When Finished

Then make sure the Restart System radio button is enabled.

Shutdown any other programs that you are running now before continuing.

Now click the Start button.

Be patient while the tool repairs the selected items.

It should reboot automatically when finished.

See if the above repairs helped.

Mwcats · Mar 18, 2015

Ok chaslang, have done that. Seemed to help with permissions and I am able to download something I couldn't before because access was denied (HP Support Assistant). So computer running pretty smoothly now with the exception of Windows Updates, and still showing all the reparse issues. Will post in Software forum about those.

I am just happy to know all malware is gone. I really, really appreciate your help and the time you have taken. Once I get the update problem fixed I will make a bootable ISO and maybe not have more problems!

Thanks bunches!

chaslang · Mar 18, 2015

You're welcome.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.

Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.

Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.

If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If you are running Win 8, Win 7, Vista, Windows XP or Windows ME, do the below to flush restore points:

Refer to the instructions for your WIndows version in this link: Disable And Enable System Restore

For Windows 8 and 8.1 system restore see this link: Win 8 System Restore - How to enable/disable

What we want you to do is to first disable System Restore to flush restore points some of which could be infected.

Then we want you to Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Mwcats · Mar 18, 2015

Read and followed all instructions, everything should be back to normal.

Thank you so much chaslang. You, this site, and the people who volunteer it are wonderful. It is hard to trust a lot of websites on the Internet these days but Major Geeks is such a great and up front place.

Again, I truly appreciate your help!

chaslang · Mar 19, 2015

You're welcome. Surf safely!

Log in or Sign up

Malware help - moved thread

Mwcats Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Mwcats Private E-2

Attached Files:

JRT.txt

Mwcats Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Mwcats Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Mwcats Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member