Virus/malware problems

Discussion in 'Malware Help (A Specialist Will Reply)' started by nobenjan, Dec 1, 2010.

  1. nobenjan

    nobenjan Private E-2

    Hello,

    This is my first post on this forum so I hope I'm doing everything right :).

    About a month ago I started to get problems with my pc, I was formatting my girlfriends laptop at the time, maybe I got virusses in by moving loads of files form her pc to mine and back.

    Every time I reboot my computer after a few hours of running things start to crash. Error messages pop up with things like: not enough memory left, dll files are missing, taskmgr.exe is dead etc. Things start to dissapear on websites and in the start menu and the only thing I can do is reboot. After a reboot everything will go smooth again for a couple of hours.

    I also think that my antivir isn't updating anymore by itself, I can still update it manually though. Antivir kept on finding virusses in the system restore points till I removed them. When I did a full system scan it found about 5 virusses, but the scanner crashed before the virusses could be removed.

    Last week I completed all the scans from the read me first thread in this forum. The problem didn't dissapear though. I couldn't post this faster because I was away the last couple of days. I'll add all the logs in this thread.

    I would like to thank you all in advance for the help!

    Greetz,

    Jan
     

    Attached Files:

    nobenjan, Dec 1, 2010
    #1
  2. nobenjan

    nobenjan Private E-2

    And the MGlogs.
     

    Attached Files:

    nobenjan, Dec 1, 2010
    #2
  3. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Currently reviewing your logs and will get back to you with a response as soon as possible.
     
    Kestrel13!, Dec 2, 2010
    #3
  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Open up the Malware Bytes program, locate the update tab > let it update > re-scan > fix anything it may find and attach the log regardless.

    Important Notice: A new version of SUPERAntiSpyware is available.
    • Please uninstall your current version (this is necessary).
    • Then download this SUPERAntiSpyware
    • Install this new version. It may tell you that you need to reboot to complete the installation. You must reboot at this time.
    • After the reboot, run SUPERAntiSpyware and immediately click the Check for Updates button to get more updates for the database.
    • Now run a new full scan of your system. And attach this log later.

    What is this? G:\Start.exe

    No site should be in your Trusted Zone.

    Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.

    Run this and attach the results.

    Using ESET's Online Scanner

    Do another full system scan and tell me if it flags anything (I am not interested in what it may find in system restore points)
     
    Kestrel13!, Dec 2, 2010
    #4
  5. nobenjan

    nobenjan Private E-2

    Hello,

    Thx a lot for the help already, till now my pc stopped crashing already but I don't know wether everything is gone :)

    Mbam and SAS updated but they didn't find anything new, logs attached.

    G:\ is a usb-stick, i gave it back to a friend already, so can't check what the Start.exe is. It was a usb stick with preinstalled progs on it that you couldn't remove tho, so it was a bit of a strange stick. It appeard in My Computer as a stick and as a cd-drive at the same time.

    Removed the trusted sites.

    Fixme.reg was successful applied.

    Eset online scanner crashed first 2 times at 40%, but the 3th time it went through a complete scan. It found 2 virusses, 1 in the restore points. I forgot to save the logs before closing the program though :-o.

    Antivir was able to do a complete scan from the first time. 1 virus found and deleted. log also attached.

    Thx again for all the help, lets hope my computer stays stable now. Can you see if it's clean atm? Tell me if you need more logs, I also attached a HiJackThis log.

    Greets, Jan
     

    Attached Files:

    nobenjan, Dec 6, 2010
    #5
  6. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Well let's have you get me a fresh set of logs and then you can describe to me how things are running. Are you still having any of the problems outlined in your first post?

    Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file that will be created by running this.
     
    Kestrel13!, Dec 6, 2010
    #6
  7. nobenjan

    nobenjan Private E-2

    Hello,

    My computer was running oke for like 2 days, but now the same problems as explained in the first post are happening again :'(

    fixme.reg was successful

    Mglogs attached

    Thx a lot!

    Jan
     

    Attached Files:

    nobenjan, Dec 10, 2010
    #7
  8. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Also delete all files in the below bold folders except ones from the current date (Windows will not let you delete the files from the current day).

    Hmm. I am not seeing any malware in the logs. So let's return to your original complaints:
    Is this still occurring? What do you mean by "Task manager is dead"? What error do you have when trying to open it?
    What programs disappear from the start menu? What disappears on websites? How do things run in safe mode with networking? Let me know! I may have to send you off to the software forum regarding all this.
    Does it update itself correctly now?
    Only toggling system restore will really remove them. We will not do that just yet though.
    Do a full system scan now and tell me the results of that.

    Java(TM) 6 Update 22 <--- uninstall, now outdated.

    Reboot your machine and install the most current and up to date version of Java available here at the below link:

    Java Runtime 6

    Answer all of my questions. :)
     
    Kestrel13!, Dec 10, 2010
    #8

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds