Suspected Malware Issues - Please Help!

gunnaknow · Jun 14, 2015

Hi, I have been trying to fix my father's computer but to no avail. I believe that the problems started several weeks ago but I am not sure of the cause. I have now installed Bitdefender and informed him that he should only visit sites that are given the green light by Bitdefender. Incidentally, Bitdefender found nothing in it's scans, even when I ran it as a boot disk.

I reinstalled Windows but the problems reappeared within hours. The most notable symptoms are as follows:

Upon booting up, after seeing "Starting Windows", the screen then goes blank for much longer than usual, before reaching the login screen. An arrow cursor appears on the blank screen, which is also not normal.

There is a delayed response when opening or closing programs and files. Everything appears to be running much slower than usual.

Internet Explorer more often than not stops responding. On the occasions when it doesn't stop responding, it frequently states, "Internet Explorer cannot display the webpage"...."Diagnose connection problem". Clicking on the latter launches Windows Network Diagnostics, which then states, "Troubleshooting couldn't identify the problem".

There don't appear to be any issues with IE when running in safe mode with networking. Programs and files also appear to open normally. I used this mode when running the programs mentioned on this forum. I have attached the logs below as instructed. If it would make a difference, I could try running them in normal mode. Many thanks for your help!

TimW · Jun 14, 2015

There is no malware in those logs. Please rerun them in normal mode.

gunnaknow · Jun 15, 2015

TimW said: ↑

There is no malware in those logs. Please rerun them in normal mode.
Click to expand...

Hi Tim,

I ran them in normal mode but the results appear to be similar, at least for those that clearly state whether or not something malicious is found. I'm wondering if it might be an infection in the BIOS, which might not show up in some scans. Here are the logs as requested. Many thanks!

TimW · Jun 15, 2015

No malware in those logs. We can try doing a few repairs:

This may take a while, so start it and go do something else.

Download Windows Repair by Tweaking.com and unzip the contents into a newly created folder on your desktop.

Now run Repair_Windows.exe by double clicking on it ( if you are running Vista or Win 7, use right click and select Run As Administrator)

Now select the Start Repairs tab.

The click the Start button.

Create a System Restore point if prompted.

On the next screen, click the Unselect All button to first deselect all repairs.

Now select the following repair options:

Reset Registry Permissions

Reset File Permissions

Register System Files

Repair WMI

Repair Windows Firewall

Remove Policies Set By Infections

Repair Winsock & DNS Cache

Repair Proxy Settings

Repair Windows Updates

Set Windows Services To Default Startup

Now on the lower right side check the box to Restart/Shutdown System When Finished

Then make sure the Restart System radio button is enabled.

Shutdown any other programs that you are running now before continuing.

Now click the Start button.

Be patient while the tool repairs the selected items.

It should reboot automatically when finished.

gunnaknow · Jun 16, 2015

Hi Tim, I ran Windows Repair but unfortunately it hasn't improved the situation. I made sure to run all of the optional pre-checks that it recommended before starting repairs. I also ran it in safe mode with networking as it recommended. The only thing that I couldn't select was Repair Winsock & DNS Cache, as it didn't appear on the list. I've attached the logs just incase they are of use. Many thanks.

TimW · Jun 16, 2015

Since you are not having malware issues, I suggest you post in the software forum for further assistance.

Since you are not having any malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.

Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.

Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.

If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Now go to the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If you are running Win 8, Win 7, Vista, Windows XP or Windows ME, do the below to flush restore points:

Refer to the instructions for your WIndows version in this link: Disable And Enable System Restore

What we want you to do is to first disable System Restore to flush restore points some of which could be infected.

Then we want you to Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Log in or Sign up

Suspected Malware Issues - Please Help!

gunnaknow Private E-2

Attached Files:

RKreport_SCN_06122015_183354.log

Malware Bytes log.txt

HitmanPro_20150612_1941.log

TDSSKiller.3.0.0.44_12.06.2015_19.21.16_log.txt

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

gunnaknow Private E-2

Attached Files:

RKreport_SCN_06142015_220655.log

Malware Bytes log.txt

HitmanPro_20150615_0002.log

TDSSKiller.3.0.0.44_14.06.2015_23.39.47_log.txt

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

gunnaknow Private E-2

Attached Files:

chkdsk_log.txt

chkdsk_full_log.txt

_Windows_Repair_Log.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member