Wave Sound Not Working! Help!

Discussion in 'Malware Help (A Specialist Will Reply)' started by skauthor, Feb 8, 2013.

  1. skauthor

    skauthor Private E-2

    Hi, ever since doing a search on Bing my computer has been infected with a virus, and nothing has worked to fix it. When trying to listen to anything on my computer, the Wave balance in my sound control keeps bar keeps going all the way down. I turn it up and it works for about 5 to 10 seconds and then it drops all the back down again on it's own.

    How can I fix this?

    I have tried system restore and it does nothing. Also I cannot restart my computer; when I do it fails to start and I have to either enter Safe Board of hit F8 to access the setting that says use the last setting that works...I mean my computer functions well still but the sound is messed up because it keeps automatically turning off. What can I do to fix this? Please help!
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

  3. skauthor

    skauthor Private E-2

    Do you want me to send logs? What do you want me to do to help me here? The problem NEEDS to be fixed preferably as soon as possible!


     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Yes, follow the instructions in that procedure TimW gave you. The sooner you follow it, the sooner you will get help. Or at least will get an answer as to whether there is any malware at play. But as TimW stated, this is probably not a malware problem.
     
  5. skauthor

    skauthor Private E-2

    I know for a fact this is a virus.
    If I send the logs will that do anything for you to help me? I can't waste time if it has no chance at all of helping my problem. Internet Explorer is opening for no reason at all and I have no access to the internet. It will not recognize any network adapters and when it was it failed to connect to the network that I have the password to and is in my house.
     
  6. skauthor

    skauthor Private E-2

    I was able to connect to an unsecure network before I moved...but since I moved it has all gone down the toilet. Finally managed to get it to start up without using Safe Mode...there is no doubt this is a virus...stupid freaking Bing! NEVER open search results from Bing!!! I NEED this fixed! My computer is my source of income! Please let me know what I have to do; and what you can do to possibly help, I know for a fact there is a virus and everything has had no effect on it whatsoever. This virus is advanced beyond any other I have encountered...there's seemingly no fix to it whatsoever...it's to the point where even if I could use a fresh coat of Windows I have no idea if it would do anything
     
  7. skauthor

    skauthor Private E-2

    I have uploaded my logs inside this post, please help because I still cannot use my ZyAir network wireless adapter...but it won't let me choose to use only Windows to access it. I have to use the program that comes with it, and when I try to connect to the wireless network it does nothing. I click "connect" and it does nothing. The option to have "Let Windows configure wireless device" or something along that lines in control panel network connections no longer shows up. Also when I was able to try using Windows the network would stop showing up, it would show up for a second then disappear entirely.
    I have Windows XP by the way...I found a few infected files and deleted those, but the problem still persists.


    Here's the log for:

    ROGUEKILLER SOFTWARE LICENSE TERMS

     

    Attached Files:

    Last edited by a moderator: Feb 15, 2013
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You didn't attach the log from RogueKiller.
     
  9. skauthor

    skauthor Private E-2

    I did post it...I copy and pasted it in the message multiple times on accident. You should have it? I don't think I have it anymore on my computer since the steps said to delete everything afterwards.
    Can you please try to help? Now iexplorer keeps opening all by itself and slowing things down. How can this be fixed? I believe the audio is working? I don't know I don't have my speakers plugged in at the moment. But the last time I checked the Wave volume is back up but now there's other issues with Internet Explorer being open all the time and using up a huge chunk of memory.
    And if for some reason it didn't send...can I do another scan with RogueKiller? and send just that? or do I need to do all the scans again?
    I just really want this fixed...it never was like this before...I have been able to solve all other viruses except this one :/
     
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Re-run RogueKiller. It will produce a log. Attach it.

    In the meantime, use windows explorer to find and delete:
    C:\Documents and Settings\Administrator\Templates\p80yr1q6khf8744k787c8p2da1mtj26a0v25m83be2
    C:\Documents and Settings\Administrator\Templates\re15525dl3y7e4hemd3d26i4u6tdmmy

    What is this:
    O4 - HKCU\..\Run: [Ahead] RUNDLL32.EXE "C:\Documents and Settings\Administrator\Local Settings\Application Data\Ahead\mewemkjs.dll",DllUnregisterServer
     
  11. skauthor

    skauthor Private E-2

    Okay I attached a log from RogueKiller, but Internet Explorer is still running and really bogging things down...also when I use Web Browsers and click on search results they occasionally open completely different pages like forced ads...and I have to go back and then click on the result and after the 2nd or 3rd time it finally takes me to the correct page. Any help with that? I don't have sound plugged in right now to the computer but it may also be having audio ads like I hear some people complain about happening when "iexploer.exe" always opens on its own.
    I also deleted those two files you told me to delete.
    And what do you mean by "What is this" I have no idea what that is personally.

     

    Attached Files:

  12. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Double-click RogueKiller.exe to run. (Vista/7 right-click and select Run as Administrator)
    When it opens, press the Scan button
    Now click the Registry tab and locate these detections:


    • [RUN][SUSP PATH] HKCU\[...]\Run : Ahead (RUNDLL32.EXE "C:\Documents and Settings\Administrator\Local Settings\Application Data\Ahead\mewemkjs.dll",PPJdeTgmNOfrgNuMXWGaPMmpawM) [x] -> FOUND
      [RUN][SUSP PATH] HKUS\S-1-5-21-1367027174-729184176-2840480129-500[...]\Run : Ahead (RUNDLL32.EXE "C:\Documents and Settings\Administrator\Local Settings\Application Data\Ahead\mewemkjs.dll",PPJdeTgmNOfrgNuMXWGaPMmpawM) [x] -> FOUND

    Place a checkmark each of these items, leave the others unchecked.
    Now press the Delete button.
    When it is finished, there will be a log on your desktop called: RKreport[2].txt
    Attach RKreport[2].txt to your next message. (How to attach)
    Do not reboot your computer yet.

    Now click the Files/folders tab and locate these detections:


    • [ZeroAccess][FILE] @ : C:\WINDOWS\Installer\{6062d58f-610a-a33b-c918-9a6695bf0d2b}\@ [-] --> FOUND
      [ZeroAccess][FILE] @ : C:\Documents and Settings\Administrator\Local Settings\Application Data\{6062d58f-610a-a33b-c918-9a6695bf0d2b}\@ [-] --> FOUND
      [ZeroAccess][FILE] @ : C:\RECYCLER\S-1-5-18\$6062d58f610aa33bc9189a6695bf0d2b\@ [-] --> FOUND
      [ZeroAccess][FILE] @ : C:\RECYCLER\S-1-5-21-1367027174-729184176-2840480129-500\$6062d58f610aa33bc9189a6695bf0d2b\@ [-] --> FOUND
      [ZeroAccess][FOLDER] U : C:\WINDOWS\Installer\{6062d58f-610a-a33b-c918-9a6695bf0d2b}\U --> FOUND
      [ZeroAccess][FOLDER] U : C:\RECYCLER\S-1-5-18\$6062d58f610aa33bc9189a6695bf0d2b\U --> FOUND
      [ZeroAccess][FOLDER] L : C:\WINDOWS\Installer\{6062d58f-610a-a33b-c918-9a6695bf0d2b}\L --> FOUND

    Place a checkmark each of these items, leave the others unchecked.
    Now press the Delete button.
    When it is finished, there will be a log on your desktop called: RKreport[2].txt
    Attach RKreport[2].txt to your next message. (How to attach)

    Now reboot and re-scan with RogueKiller and attach that log as well.
     
  13. skauthor

    skauthor Private E-2

    Okay I have deleted the first ones you mentioned, but when I went to the Files\folders option it was blank with no files showing up.
    Here are the logs from deleting those two and rebooting though...the first being the initial scan, 2nd removal of the two files under Registry, and the last one is the log from the scan after reboot.
    What can I do now? Why did those files you told me to delete not sure up under the Files\Folder tab? is it really important to delete them too?
     

    Attached Files:

    Last edited by a moderator: Feb 17, 2013
  14. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    They were deleted per log #2. What issues are you still having?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds