Ran Read and run

Discussion in 'Malware Help (A Specialist Will Reply)' started by mikefrayser, Nov 7, 2009.

  1. mikefrayser

    mikefrayser Private E-2

    Hi. I ran read and run first. This is for a friend's computer. She is running Vista Home Premium 64 bit so I only ran SAS, MalwareBytes and MGTools. She has some issues still. No MS Office apps will open. When I open task manager under system resources it says she is always using around 1.8 gig of memory. She has 4 gig RAM but that seems a little high for a computer sitting idle to me. I may be on the wrong track even trying the Malware thing but I don't know. I'm attaching the logs and any help you can give will be greatly appreciated. You guys really are doing a great service and should be commended. Thank you so much.
     

    Attached Files:

    mikefrayser, Nov 7, 2009
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Please check that you ran the correct version of MGTools as the log you attached is both virtually empty ( by its size ) and will not open.
     
    TimW, Nov 9, 2009
    #2
  3. mikefrayser

    mikefrayser Private E-2

    I'm on my way to check it now. I do have a question though. In Vista, do I double click MGTools.exe or do I right click it and run it as an administrator. I ran the .bat file as an administrator but I had to do the .exe file twice double clicking on it before it would even create the MGTools folder in my c drive
     
    mikefrayser, Nov 9, 2009
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    This is for both the MGTools.exe and the getlogs.bat. Then make the agreement to run HJT and wait till the scan tells you it is done.
     
    TimW, Nov 9, 2009
    #4
  5. mikefrayser

    mikefrayser Private E-2

    I deleted everything associated with MGTools and redownloaded it. When I ran the .exe file as admin it did a bunch of stuff and it created the MGlogs.zip file already. Maybe it is supposed to do that but I'm not sure so I'm uploading that one now. I'm having to use another computer and a flash drive though because the one I'm working on keeps freezing up. Anyway, here is the first log file and I'm about to run GetLog.bat and I'll send that one next. Thanks for you help.
     

    Attached Files:

    mikefrayser, Nov 9, 2009
    #5
  6. mikefrayser

    mikefrayser Private E-2

    Well, I uploaded that log file and then ran GetLogs.bat as admin. The thing says it finished and hitting any key will close the window but it isn't closing it and the windows explorer window behind it that I ran the file from is still there and the address bar or whatever you call that thing is green and the green part is kind of pulsing like maybe it froze up writing the zip file or something. I'm not sure. Sorry I can't be of more help here.
     
    mikefrayser, Nov 9, 2009
    #6
  7. mikefrayser

    mikefrayser Private E-2

    Here is the log file that was left after I tried to run GetLogs.bat. I think it froze up and I had to just power the computer off and then let it do chkdsk and all that. I copied it to a flash drive again. I hope this helps. I'm also trying to run GetLogs.bat again right now and if it works better this time I'll send that file too. Thank you again for everything and I'm sorry I can't be of more help on my end.
     

    Attached Files:

    mikefrayser, Nov 9, 2009
    #7
  8. mikefrayser

    mikefrayser Private E-2

    I tried to run MGTools.exe again in regular and safe modes and it locks up after it says 64 Bit Window OS Found. Please help me
     
    mikefrayser, Nov 10, 2009
    #8
  9. mikefrayser

    mikefrayser Private E-2

    I think I finally got it. I would like to apologize if I lack the proper etiquitte. I'm not overly experienced with this type of correspondence. I think this is a good MGLogs zip file. I had to run GetLogs in safe mode. Thank you again for all of your help.
     

    Attached Files:

    mikefrayser, Nov 10, 2009
    #9
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I am not seeing anything to indicate malware in your logs. I do suggest that you remove these items in your temp folders:
    C:\Windows\TEMP\pn6189.tmp
    C:\Windows\TEMP\pnCDA4.tmp
    C:\Windows\TEMP\UDDBC9C.tmp
    C:\Users\Barbara\AppData\Local\Temp\is-3I9L1.tmp
    C:\Users\Barbara\AppData\Local\Temp\is-UF9RQ.tmp

    Let me know exactly what issues you are still having.
     
    TimW, Nov 13, 2009
    #10
  11. mikefrayser

    mikefrayser Private E-2

    Thank you and I will delete those files. The computer just locks up for no apparent reason some times. And no MS Office apps will open. I checked the resources and it seems to always be using 1.5 to 1.8 gig of RAM out of a total of 4 even when no apps are running. This all just started a couple of weeks ago when she installed a new wireless printer. I uninstalled the printer, but the problems still are here. Plus, it won't complete windows update and it is a critical one without locking up. Thank you so much for you help with this.
     
    mikefrayser, Nov 13, 2009
    #11
  12. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    This sounds like a software issue. I suggest that you post in the software forum for both these issues. You might just need to run a repair in your office products. And your updating issue should also be looked at in software.

    Sine you are not having any malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real-time protection. They are useful as backup scanners.They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    5. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    6. Go to add/remove programs and uninstall HijackThis.
    7. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    8. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures in step 3 the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore ato create a new clean Restore Point.
    9. After doing the above, you should work thru the below link:
     
    TimW, Nov 13, 2009
    #12

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds