Sony Vaio Virus Or Hardware?

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by herbz100, Oct 16, 2017.

  1. herbz100

    herbz100 Private E-2

    My family Sony Vaio VPCEH i5 which i haven't used for over a year and hasn't been used since it was brought is acting very strangely.

    some keys dont work on some occasions
    sometimes the arrow freezes
    the fan is hot
    the AC adaptor gets very hot

    I have attached the logs but it may not be related to maleware.
     

    Attached Files:

  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Remove everything that ADWCleaner found. Do the same with MBAM!! Rerun Hitman and remove everything it found!! Then do the same with RogueKiller.

    Reboot and rescan with MBAM, ADWCleaner , Hitman and RogueKiller and attach the new logs, please.
     
  3. herbz100

    herbz100 Private E-2

    Thaniks Tim. Just been away for some Diwali celebrations. here are the recent logs attached. my delete button and return button seem not to work so could alsso be a hardware issue too. My hitmanpro seems to be a version i had a long time ago anfd therefore the trial has finished so not sure i can delete from this.
     

    Attached Files:

  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Remove everything that RogueKiller found.

    Download OTM by Old Timer and save it to your Desktop.


    Code:
    :Processes
    explorer.exe
    
    :files
    C:\ProgramData\Optimizer
    C:\Program Files (x86)\Windows Network Accelerater\v5\vxmclient.exe
    C:\Program Files (x86)\Windows Network Accelerater\v5\winvxm.exe
    C:\ProgramData\Optimizer\program\newver_33_1.7.8.0.exe
    C:\ProgramData\Optimizer\program\newver_33_1.7.9.0.exe
    C:\ProgramData\Optimizer\program\newver_33_1.7.9.1.exe
    C:\ProgramData\Optimizer\program\newver_467_1.7.9.3.exe
    C:\ProgramData\Optimizer\program\system_chromeupdateam.exe
    C:\ProgramData\Windows VXM\program\newver_736_1.8.5.0.exe
    C:\Users\Mital\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L1MPNWRA\chrome-setup[1].exe
    C:\Users\Mital\AppData\Local\nsaD116.tmp
    
    :reg
    [-HKLM\SOFTWARE\Classes\Interface\{34AD1EA7-8B9E-4D8B-B3ED-365D12C8EE73}]
    [-HKLM\SOFTWARE\Classes\Interface\{35144E32-8E4C-4152-9B8C-3E2D4B46228E}]
    [-HKLM\SOFTWARE\Classes\Interface\{35BBB95B-2CE4-4A9E-BDED-50EFD632AC00}]
    [-HKLM\SOFTWARE\Classes\Interface\{3BA6794F-1E38-4460-949A-0DE97D8EF5C2}]
    [-HKLM\SOFTWARE\Classes\Interface\{3CBA93EA-AEC3-4EC3-9EFD-D96A661B639D}]
    [-HKLM\SOFTWARE\Classes\Interface\{46CE5380-6055-4C3A-A7E5-3A02A2335C61}]
    [-HKLM\SOFTWARE\Classes\Interface\{4F6ECF71-C575-4BD2-8EF7-548D0EF1AB1D}]
    [-HKLM\SOFTWARE\Classes\Interface\{54D99BE4-2FD7-449E-9DB4-76532CEE0B16}]
    [-HKLM\SOFTWARE\Classes\Interface\{5684EAE9-72EB-4CA6-83B8-82434B7E955C}]
    [-HKLM\SOFTWARE\Classes\Interface\{5A96E574-F8A6-4F6A-B58D-79C14B698017}]
    [-HKLM\SOFTWARE\Classes\Interface\{6605E3BD-7BC3-479C-BF0A-E5D5E954EA52}]
    [-HKLM\SOFTWARE\Classes\Interface\{7FCD22A8-B70A-4AC7-AAF1-EBCCD2F6612D}]
    [-HKLM\SOFTWARE\Classes\Interface\{8B8BB3A7-2ADE-4995-931D-60B430A9B44E}]
    [-HKLM\SOFTWARE\Classes\Interface\{93F0AC70-20D8-4AE8-A02F-6812EFFB6B58}]
    [-HKLM\SOFTWARE\Classes\Interface\{94E98D20-156E-4C53-BD7F-972C96E680B2}]
    [-HKLM\SOFTWARE\Classes\Interface\{A266567F-8E5D-480C-BCE2-C360FA669FD5}]
    [-HKLM\SOFTWARE\Classes\Interface\{CE4F67F6-4FD4-49DB-9D71-713CCD3D00CD}]
    [-HKLM\SOFTWARE\Classes\Interface\{E14CDC24-4BE1-4B65-8452-4BFA0DCEF274}]
    [-HKLM\SOFTWARE\Classes\Interface\{ECC69F9E-5456-4EDF-AF66-1A9DED11F9EE}]
    [-HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
    [-HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{E14CDC24-4BE1-4B65-8452-4BFA0DCEF274}]
    [-HKU\S-1-5-21-4107058637-3694746461-689509911-1001\Software\Classes\Mime\Database\Content Type\application/x-bubbledock]]
    [-HKU\S-1-5-21-4107058637-3694746461-689509911-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975}]
    [-HKU\S-1-5-21-4107058637-3694746461-689509911-1001\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow]
    [-HKU\S-1-5-21-4107058637-3694746461-689509911-1001_Classes\Mime\Database\Content Type\application/x-bubbledock]
    
    :Commands
    [purity]
    [ResetHosts]
    [createrestorepoint]
    [emptytemp]
    [start explorer]
    [Reboot]
    • Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
    • Push the large http://farm3.static.flickr.com/2782/4174320048_f01c448b32_o.png button.
    • OTM may ask to reboot the machine. Please do so if asked.
    • Copy everything in the Results window (under the green bar), and paste it in your next reply.

    Now navigate to the C:\_OTM\MovedFiles folder ( assuming your Windows drive is C). This is where your log will be saved in the form of Date and Time mmddyyyy_hhmmss.log. Just look for the most recent .log file. Attach this log file to your next message.

    After the reboot, rescan with MBAM, RogueKiller and Hitman and attach those logs as well.
     
  5. herbz100

    herbz100 Private E-2

    Hi Tim, please4 see the attached.
    many thanks
     

    Attached Files:

  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Looks good. What issues are you still having, if any?

    These are issues that should be addressed in the Hardware forum.
     
  7. herbz100

    herbz100 Private E-2

    Hi Tim , still sticky s keys whchih I will address in the hardware forum.

    The laptop seems ok at the moment, many thanks Tim. Is there a way to find out what processes I have at the start up that I could eliminate or disable to improve the speed of the laptop to prevent any lagging?? Could you check to see what is not necessary?

    Best Wishes my d
     
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    CCleaner will list all your startups.

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Re-enable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8 or 10, it is time to make sure you have re-enabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now go to the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 or 10 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. After doing the above, you should work thru the below link:
     
  9. herbz100

    herbz100 Private E-2

    thnanks , ill have a look into ccleaner.

    ill finish off the final steps.

    BW


    44
     
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Your welcome.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds