Malware

hormasji · Aug 24, 2012

I have been having malware problems with my laptop for some time. Initially it was Microsoft visual basic C++ runtine error R6002 :floting point support not loaded.& a DLL error C:\user]acer\appdata\local\temp\rpcqt.dll :specific module could not be loaded. I dont know what started it.But i got those fixed by a cousin of mine. So they dont appear on start up any more. But i dont think he cleared everything. Because a lot of the problems i had are still there. Here is a list. And all of them started with these two errors:
1. Sometimes a blue screen appears saying dumping physical memory. and the laptop restarts.
2. Sometimes before windows loads, there appears an error saying No bootable disk found, insert boot drive and press any key, and windows itself doesnt load. But if i restart the laptop a few times, the system starts working normally.
3. The screen hangs a lot.
4. A lot of the time windows load in repair mode. Even though i shut the system down properly.

Kestrel13! · Aug 25, 2012

I have a feeling you are going to have to ask about this in the software forum. Not seeing much to do here.

Delete these folders:

C:\Users\Acer\AppData\Local\Conduit

C:\Users\Acer\AppData\Local\temp

C:\Users\Acer\AppData\Local\temp(28)

C:\Users\Acer\AppData\Roaming\ParetoLogic

C:\Users\Acer\AppData\Roaming\DriverCure

C:\ProgramData\ParetoLogic

C:\Program Files\Conduit

C:\Program Files\Application Updater

C:\Program Files\Common Files\Spigot

Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

REGEDIT4

[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{44BD8499-BF26-440C-B45A-D2128C0380C7}]
Click to expand...

Make sure that you tell me if you receive a success message about adding the above
to the registry. If you do not get a success message, it definitely did not work.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista or Windows7) Then attach the new C:\MGlogs.zip file that will be created by running this.

How are things running? No better?

hormasji · Aug 26, 2012

Thanks for replying Kestrel13!.

I could'nt delete this file, because it said i didnt have permission.
"C:\Program Files\Application Updater"

The Notepad merged with the registry and i even got a success message.

But i still have all the problems. In fact i had problems loading windows right after the MG tools scan. I also got a blue screen for dumping physical memory in between the process (before i had done the scan).

Also i asked my cousin... to remove the DLL and the Visual C++ errors he used Combofix. Combofix is still on my desktop. He didnt removed it. I am not even sure whether he did the process correctly. Should i post the last Combofix log that is saved in the laptop to you? so that you can check if that was ok!

Kestrel13! · Aug 26, 2012

I'm afraid this would appear to be non malware related, and therefore you should post about this in the software forum. Thanks.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /uninstall

Notes: The space between the combofix" and the /uninstall, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
related to MGtools and some other items from our cleaning procedures.

If you are running Win 7, Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures pointed to by step 7 of the READ ME
for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Log in or Sign up

Malware

hormasji Private E-2

Attached Files:

RKreport[1].txt

mbam-log-2012-08-22 (01-12-31).txt

TDSSKiller.2.8.7.0_22.08.2012_01.28.58_log.txt

HitmanPro_20120822_0148.log

MGlogs.zip

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

hormasji Private E-2

Attached Files:

MGlogs.zip

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member