Windows XP Cleaning Procedures Complete

Discussion in 'Malware Help (A Specialist Will Reply)' started by lararj, Nov 11, 2009.

  1. lararj

    lararj Private E-2

    Not certain if I had a Malware issue at first but went through Malware Removal process. Following all the steps in the READ & RUN ME FIRST, Malware Removal Guide. I had no problem going through the steps of downloading, installing, and running them except for one. On the RootRepeal program for scanning the C: drive under the File tab it kept crashing. My other drives went through the scan fine. Do I need to do something else? Not sure if all the logs as well determine if the found items indicate removed as well. I can't seem to find the other 2 log files SASlog.txt and Malwarebytes Anti-Malware log, so if you can direct me where to look, I can send those as well. Thanks in advance.
     

    Attached Files:

    lararj, Nov 11, 2009
    #1
  2. lararj

    lararj Private E-2

    Here are the logs I couldn't find yesterday.
     

    Attached Files:

    lararj, Nov 12, 2009
    #2
  3. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    The scans found a few items and removed them. The rest of your logs are clean.

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real-time protection. They are useful as backup scanners.They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    7. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures in step 3 the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore ato create a new clean Restore Point.
    8. After doing the above, you should work thru the below link:
     
    TimW, Nov 14, 2009
    #3
  4. lararj

    lararj Private E-2

    Tim, thanks for your help on my computer. I am now working on my wifes computer and attaching her log files. Her computer is running Windows 2000. I got a few different things come up with running the some of the programs. Like on ComboFix, it did not go through all the steps like on my computer. I really only saw step 49 I believe. I saw a message of comres.dll found infected. I'm sure you'll see that on the log for ComboFix.
     

    Attached Files:

    lararj, Dec 13, 2009
    #4
  5. lararj

    lararj Private E-2

    Here is the last log for my wifes computer.
     

    Attached Files:

    lararj, Dec 13, 2009
    #5
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You should have started a new thread for a different computer. However, the only thing being reported is that comres.dll is infected. However, that file does not exist on Windows 2000. So your logs are clean.

    Sinceyou are not having any malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real-time protection. They are useful as backup scanners.They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /uninstall
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    7. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures in step 3 the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore ato create a new clean Restore Point.
    8. After doing the above, you should work thru the below link:
     
    TimW, Dec 15, 2009
    #6

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds