Ran Read & Run First

Discussion in 'Malware Help (A Specialist Will Reply)' started by mikefrayser, May 21, 2009.

  1. mikefrayser

    mikefrayser Private E-2

    I ran The read and run stuff and am not sure if I still have problems or not. When I start my computer a folder called "Common" still pops up with a file in it called _helper.sig. I am attaching my 4 log files and any help would be greatly appreciated. Sincerely, thank you for all you do.
     

    Attached Files:

  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    It looks like the scans took care of most of it, so let's just do this:

    Please use add/remove programs to uninstall:
    J2SE Runtime Environment 5.0 Update 10"
    J2SE Runtime Environment 5.0 Update 4"
    J2SE Runtime Environment 5.0 Update 6

    Now use windows explorer to find and delete:
    C:\WINDOWS\kdiue732.txt
    C:\Documents and Settings\Mike\Local Settings\temp\rtdrvmon.exe
    C:\WINDOWS\common --> not common files.

    Tell me what issues you still have.
     
  3. mikefrayser

    mikefrayser Private E-2

    I did what you said except the common folder was in c:\Program Files and not in c:\WINDOWS but _helper.sig was in it and I deleted it and my problems seem to be solved. Thanks. Just curious if I can empty Recycle Bin or not. Thanks again
     
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Definitely empty the recycle bin!! :)

    If you are not having any other malware problems, it is time to do our final steps:

    1. We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They are useful as backup scanners. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

      • Delete the C:\combofix folder from combofix (if it exists)

    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    7. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.

    8. After doing the above, you should work thru the below link:

     
  5. mikefrayser

    mikefrayser Private E-2

    I didn't get this far. After my last reply I went to bed and got up this morning to a very slow computer. My cpu usage in task manager is 100% in regular mode. I'm in safe mode right now. Should I follow the directions below anyway? I didn't uninstall combofix yet. Could that be causing this?
     
  6. mikefrayser

    mikefrayser Private E-2

    Back in regular mode now and about to do the instructions from before. Will it hurt if I start all over with the read and run first? It took a long time for IE to open still but at least it opened. When I opened it I had task mgr open and my cpu usage spiked to 100%. Is that normal? Wll I'm gonna go ahead with the uninstalls you requested. Thanks again.
     
  7. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You should re-run the scans if you are having new issues. Then attach all the logs:
    SAS
    MBAM
    Combo
    MGLogs.zip
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds