Unable to update windows, webpage hijacked, norton being useless

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by deletesystem32, Oct 28, 2014.

  1. deletesystem32

    deletesystem32 Private E-2

    My brother's computer recently started having problems after updating his windows 8 computer. He said the computer would start "blinking" after typing in his password, and he couldn't run anything except task manager. He restored the computer to an earlier point, but then Norton had an error and instructed him to uninstall it, and Groovorio search engine dug itself into chrome and IE. Since then, I've managed to clear the temporary internet files from both IE and Chrome, removed Groovorio as the default startup / search engine.

    Right now, I can't get the internet to run unless I turn off Norton's Smart Firewall (Norton itself is acting extremely slow)

    I did a few recommended scans, but was unable to run CCleaner's ccsetup419_slim, RogueKillerX64, or MGtools(clicking it makes its process show in task manager, but does nothing. Running as an administrator does nothing). I've included log files for your review.
     

    Attached Files:

    deletesystem32, Oct 28, 2014
    #1
  2. deletesystem32

    deletesystem32 Private E-2

    Update: After re-installing Norton, I was able to run the other programs and get their logs(attached below), and I'm also able to run Google, although it seems to start slower.
     

    Attached Files:

    deletesystem32, Oct 28, 2014
    #2
  3. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Rerun Hitman and have it fix everything if finds. Otherwise I am not seeing any malware in your logs. What issues remain ( You might want to uninstall Norton and go with a different program.) You also need to fix what MBAM found.
     
    Last edited: Oct 28, 2014
    TimW, Oct 28, 2014
    #3
  4. deletesystem32

    deletesystem32 Private E-2

    Oddly enough, the only thing that comes up in Hitman is ask.com, so maybe one of the other programs removed the malware? MWBAB was also the first program I ran.

    Now I'm trying to download 98 updates from Microsoft Update, but they all seem to fail. The malicious software removal tool alone gets stuck at 99%.
     
    deletesystem32, Oct 28, 2014
    #4
  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I suggest you post in the software forum for additional assistance.

    Since you are not having any malware problems, it is time to do our final steps:

    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. After doing the above, you should work thru the below link:

     
    TimW, Oct 28, 2014
    #5

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds