Read Me and Run Me First Results

Discussion in 'Malware Help (A Specialist Will Reply)' started by Andrew_L, Jun 19, 2009.

  1. Andrew_L

    Andrew_L Private E-2

    Hello,

    My father in law was experiencing long load times in Internet Explorer within the past weeks of up to 10 minutes (he swears) and he seems to think that it started when a web page was terminated and a windows message about data prevention came up (I will attach a report from this). I brought his laptop to my house and didn't notice anything right away until the next morning and noticed that some pages would take up to 45 seconds to load so I decided to start here (at other times of the day it would be fine and nothing appeared to be working that I noticed). He had CA Internet Installed which I had to uninstall to get Combofix to run as it said the CA antivirus and Anti Spyware were still running and I had disabled them. He isn't real happy with it so he said I was welcome to get rid of it anyway. SAS and MBAM seemed to run fine and found no infections (see reports). After un-installing CA Internet Suite ComboFix ran successfully and RootRepeal would not (see reports). I then ran MGtools and am attaching those logs as well. He is also constantly getting a Windows message saying that HP (Hewlet Packard) xxxxx (it's always something different) has stopped working and will be closed and Windows will check for a solution. I'm not sure if it has anything to do with a network printer he uses at home. Another thing I have noticed when using his computer is that the mouse pad often freezes for about 8 seconds about every 20 minutes.

    1st message contains SAS, MBAM, Combofix, and MGtools logs. Second message will contain the error logs from trying to run RootRepeal and the windows error message when he first started experiencing the proplem in IE.

    Thanks in advance,

    Andrew
     

    Attached Files:

    Andrew_L, Jun 19, 2009
    #1
  2. Andrew_L

    Andrew_L Private E-2

    Two additional items:

    SAS would not run until I gave it a totally generic name. I tried mb.exe and it wouldn't run. I am also noticing 2 new icons on the desktop that are named "desktop.ini" and I'm not sure where they came from but they weren't there when my FIL gave me the computer.


    1st message contains SAS, MBAM, Combofix, and MGtools logs.

    2nd message will contain the error logs from trying to run RootRepeal and the windows error message when he first started experiencing the proplem in IE.
     

    Attached Files:

    Andrew_L, Jun 19, 2009
    #2
  3. Andrew_L

    Andrew_L Private E-2

    I don't see my second set of attachments or the reply to my message but did read something on the "post a thread" thread that stated they may not show up right away due to the spam filter. If they do not show up let me know and I'll repost.

    Thank you,

    Andrew
     
    Andrew_L, Jun 19, 2009
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Your logs are clean. Whatever issues you are having should be addressed in the software forum. And I would suggest that you now download an AV program as suggested in the following;

    If you are not having any other malware problems, it is time to do our final steps:

    1. We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They are useful as backup scanners. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

      • Delete the C:\combofix folder from combofix (if it exists)

    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    7. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.

    8. After doing the above, you should work thru the below link:

     
    TimW, Jun 21, 2009
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds