Windows 7 Malware Logs

Malware rarely causes BSOD's. But we can clean up a few things before we send you to the software forum.

Rerun RogueKIller and have it fix these items:

Code:

¤¤¤ Registry : 11 ¤¤¤
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Found
[PUP] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Found
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Found

Now rerun Hitman and have it fix everything it finds.

Download OTM by Old Timer and save it to your Desktop.

• Right-click OTM.exe And select " Run as administrator " to run it.
• Paste the following code under the http://farm3.static.flickr.com/2455/4173556815_a721a91733_o.png area. Do not include the word Code.

Code:

:Processes
explorer.exe

:files
C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
C:\Windows\system32\tasks\PCDoctorBackgroundMonitorTask
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\*.*
C:\Users\root\AppData\Local\Temp\*.*

:reg
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

:Commands
[purity]
[ResetHosts]
[emptytemp]
[start explorer]
[Reboot]

• Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
• Push the large http://farm3.static.flickr.com/2782/4174320048_f01c448b32_o.png button.
• OTM may ask to reboot the machine. Please do so if asked.
• Copy everything in the Results window (under the green bar), and paste it in your next reply.

Reboot and rescan with both RogueKiller and Hitman and attach those logs as well.



Now navigate to the C:\_OTM\MovedFiles folder ( assuming your Windows drive is C). This is where your log will be saved in the form of Date and Time mmddyyyy_hhmmss.log. Just look for the most recent .log file. Attach this log file to your next message.

 

Your logs are clean. What issue remain, if any?

 

Don't forget to delete this folder, it's part of all the crap Malware Bytes was finding.

• C:\Program Files (x86)\globalUpdate

Also delete what Windows lets you from this location:
C:\Users\root\AppData\Local\Temp