Virus Causing Problems with Catalyst & Mozilla

jellobean · Nov 25, 2012

Hi, I've spent the weekend trying to figure out what is causing issues with my husband's computers (along with my niece's which is in another post). My husbands laptop has been having problems, but we aren't sure the origin. It keeps saying that Catalyst (don't know the whole name, that's all he remembers) won't run, and despite uninstalling and reinstalling Mozilla Firefox, it won't open. It just says that Firefox is already running, but is not responding, and I must close the process. I can't find the process actually running and this comes up even after restarting the machine.

I've attached all the logs.

Thanks.

TimW · Nov 26, 2012

I am not finding any malware in your logs. You should pursue this in the software forum.

Just to be sure you are uninstalling and re-installing correctly, do this:

We are going to be uninstalling your old version of FireFox and installing the new version. So do the below to save bookmarks:

Run FireFox and click Bookmarks.

Then select Organize Bootmarks.

Then on the next window click File and then select Export. Save the bookmarks.html file to your Desktop for later use in importing.

Now download and save the installer for the current version of FireFox but DO NOT install it yet. Get it here: Mozilla Firefox 15.0.1 Final

You will need exit FireFox now and use Internet Explorer to continue with the below until we reinstall FireFox.

Start by uninstalling FireFox and then reboot. Do not skip the reboot.
After reboot, delete the below folders:
C:\Program Files\Mozilla Firefox
C:\documents and settings\UserAccount\Application Data\Mozilla

where UserAccount is the actual user account name being used.

Now reinstall FireFox from the file previously downloaded.
Import your bookmarks file. (similar process to exporting).

If that doesn't work, post in the software forum.

Since you are not having any malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. You can uninstall RogueKiller and HitManPro.

Go back to step 4 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
related to MGtools and some other items from our cleaning procedures.

After doing the above, you should work thru the below link

How to Protect yourself from malware!

Malware removal from a National Chain = $149
Malware removal from MajorGeeks = $0

jellobean · Feb 12, 2013

I attempted to follow your steps for uninstalling and reinstalling Mozilla, however, I was not able to access (so therefore could not delete)
C:\documents and settings\UserAccount\Application Data\Mozilla

I tried to access both through Documents and Settings in the C drive and also through Application Data within the User Account. Both times I got an access is denied message. I also noticed that the folders were "shortcut" folders rather than the actual folder icon they should have been.

Edit: Oops. I just noticed your message to post in the software forum if this didn't work. I will do so now.

Thanks.

TimW · Feb 13, 2013

Good luck. I will try to keep an eye open for your post.

Log in or Sign up

Virus Causing Problems with Catalyst & Mozilla

jellobean Private E-2

Attached Files:

RKreport[1]_S_11242012_02d1320.txt

mbam-log-2012-11-24 (14-02-34).txt

TDSSKiller.2.8.15.0_24.11.2012_18.37.33_log.txt

HitmanPro_20121124_1920.log

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

jellobean Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member