Problem Running Mgtools

A friend said he thought he might have some malware, so I followed the instructions on MajorGeek’s READ & RUN ME FIRST Malware Removal Guide and Vista & Windows 7,8,10 Malware Removal/Cleaning Procedure, and everything went fine, and there appeared to be nothing more than a little adware, but as advised, I did nothing to quarantine, remove, delete or repair any malware, I just generated logs.

I thought I’d send all the logs in together, but I was unable to obtain the last one, for MGtools.

When I ran it, it kept repeatedly asking if I would allow each step. And it asked so many times that I had to abort; there was just no way to get through it all.

He’s running Windows 10, so there was no need to disable UAC, and I had disabled his security software (Malwarebytes and Windows Defender), but to no avail.

And yes, I was running MGtools from the root at C:.

I had never had this problem on the few occasions that I had gone through this whole process on my own computer.

What am I doing wrong?

 

Yes, I did, as instructed for all the scanning programs. And I did that despite the fact that the single user account on his machine has Administrator privileges, anyway.

 

Thanks Tim, I downloaded it, and I'll take it to him and run it as instructed, and then submit all logs, including the one for FRST.

 

Hi, Tim —

OK, I don’t know what went wrong the first time, but I tried again to run MGtools, and this time it worked fine.

But since I downloaded FRST, I ran that, too.

So here are ALL the logs.

What was the anomalous behavior my friend was seeing?

I think at first he encountered a malicious website, and that problem has not resurfaced. I told him to upgrade the free version of Malwarebytes I installed on his PC to the Premium version, so that should fix that.

But in the past couple days he’s been seeing an error message that says “rpsystray has stopped working.” Apparently this has something to do with RealPlayer.

I’m not sure what other odd things he’s been seeing, if any.

Anyway, here are the logs, if you’d care to look them over.

Thanks.