Some Issues

Welcome to Major Geeks!

You should not be running the scans in safe boot mode unless you cannot run in normal boot mode. Your MGtools logs shows you were in safe boot mode which provides us less information than we would get in normal mode.

Please attach it anyway as requested. It is how we know that the correct version is used even if nothing was found.

Your Malwarebytes log shows that you took no action. Please run it and first update it. Then run a new scan and fix what it finds before saving a log. Then attach the new log. Then continue on with the below.

Do you need AIM Toolbar? The same goes for Grab Pro and Yahoo Toolbars.

If not then uninstall it. Uninstall anything else that you don't need from AOL.

Do you use Roxio's software? It loads lots of processes and services at startup and has been know to slow things down.


What is the below for? Is it for a game? Games that require this should be boycotted. Is this game still really installed and necesssary.
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)

Do you really need to run Steam everytime you start your PC? This also slowing down your startup and causing delays.


I strongly advise you to immediately cleanup your Desktop. Remove eveything but links to run programs. Do not download and save programs here and defintely do not use it for long term storage. You need to keep ComboFix.exe here for now as we need it, but we will be removing it when we are finished with your cleanup. A cluttered Desktop is malware's playground and it can also cause performance degradation especially when you start saving large files here like you are doing.

Run this Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

Uninstall the below old versions of software:
J2SE Runtime Environment 5.0 Update 6
Viewpoint Media Player <-- should have been uninstalled in step 1 of the READ ME



Now we need to use ComboFix

• Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
  • If it is not on your Desktop, the below will not work.
• Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
• If ComboFix tells you it needs to update to a new version, make sure you allow it to update.
• Open Notepad and copy/paste the text in the below quote box into it:

• Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
• At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
• You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
• Now use your mouse to drag CFscript.txt on top of ComboFix.exe
• Follow the prompts.
• When it finishes, a log will be produced named c:\combofix.txt
• I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.


After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment

Now run Ccleaner. Only use the Run Cleaner button. Do not run anything else on any other forms.

Now download the current version of MGtools and save it to your root folder. Overwrite your previous MGtools.exe file with this one.

Run MGtools.exe ( Note: If using Vista make sure UAC is still disabled. Also don't double click on it, use right click and select Run As Administrator )



Now attach the below log:

• C:\ComboFix.txt
• C:\MGlogs.zip

Make sure you tell me how things are working now!

 

You're welcome, but if you don't attach the follow up logs I requested, I cannot verify that the malware was truly removed.