JeanInMontana
-
Posts
3,859 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by JeanInMontana
-
-
OK the HJT must come after the MBAM scan. Please go into notepad and un check wrap text until we are done here. It makes the HJT log split lines and harder to read. Please update MBAM run a quick scan and post that log and a new HJT log. Let me know what your symptoms are if any now.
-
Hi mikeydude and welcome to Malwarebytes. Please update MBAM and run a quick scan, post that log and a new HJT log. Let me know if your still be redirected.
-
Hi jimmy and welcome to Malwarebytes.
Please set your system to show
all files; Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab.
Under the Hidden files and folders heading select Show hidden files and folders.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.
Please find this file C:\WINDOWS\system32\RUNDLL32.EXE
and attach it in a zipped folder here in a new topic you start, link back to your thread here in the HJT forum please.
-
I am a paid user of MBAM. Is there any advantage (or problem) to having windows defender active while MBAM protection module is active?
I really don't want any more things running in the background than I really need.
Currently I have:
Windows Defender (real time protection active)
Antivir Personal free edition installed (for antivirus).
Spybot S&D with resident IE and teatimer active (to monitor reg changes)
MBAM (Paid) with protection module enabled.
ZoneAlarm (free) firewall. Windows firewall is disabled.
That's it. Any potential problems? Have had no conflicts so far. I guess what I'm really asking is do I need Win Defender running at all?
Rob K.
If you don't know how to use TeaTimer it can be a real pain and hard to know what to allow and what not. Allowing and or blocking the wrong things can be very bad too.
-
Hi MattCS and welcome to Malwarebytes. Where did you see the post with this? The current version of MBAM is 1.30 why install 1.29? Have you tried booting to last known good configuration? System Restore ? I'll make sure the boss sees this too.
-
Since this is the second thread by this user I will close it. Please start only one thread for help in this forum.
-
Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you.
The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.
-
We aim to be the best. But let's be sure and get a new MBAM log and HJT please. Then there are some final steps also.
-
You didn't post the HJT log. I need to see that too please.
-
Norton would be among my last choices for anything.
All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal.
A firewall and antivirus are also essential. The Windows firewall in XP and Vista is not sufficient.
Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan.
Keep other software known for vulnerabilities updated also. Use the Secunia Inspector free scan to identify risks in outdated versions.
Spybot Search & Destroy Be sure to use the immunize feature.
SpywareBlaster from Javacool Software
The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free
Also the full protection of MBAM is offered at a very low price For life in my signature.
You will also need at least one other scanning program Asquared or SuperAntiSpyware are good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use.
-
Bit torrent is usually used to down load illegal music or videos. It is most likely how you got infected also.
Your log looks clean. We need to now reset a clean System Restore point. If you don't and you need to use System Restore you will reinfect yourself. Go to Start>Control Panel>System. Click on the System Restore tab and put a check in Turn off System Restore. Then click OK.
Now go to Start>Help and Support > Undo Changes to Your System or System Restore depending on the make of your PC. Click on what ever will open the System Restore box. You will see two options, Choose Create a System Restore Point. Give it a name like Clean Restore Point and today's date. Now if you need to use it you have it.
Many of infections can be avoided with an added layer of prevention. All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal. Keep MBAM and Spybot Search & Destroy and always immunize SBS&D when you update. You will also need at least one other scanning program Asquared or SuperAntiSpyware are good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use.
A firewall and antivirus are also essential. The Windows firewall in XP and Vista is not sufficient.
Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan.
Keep other software known for vulnerabilities updated also. Use the Secunia Inspector free scan to identify risks in outdated versions.
SpywareBlaster from Javacool Software
The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free
Also the full protection of MBAM is offered at a very low price, from the link in my signature.
-
Well your logs look clean. Some final steps.
You are running an outdated and unsafe version of Java. You need to uninstall it via Add/Remove programs and delete the program file also. Then go here Java Update and install the correct version for your system. Choose the offline installation.
Your log looks clean. We need to now reset a clean System Restore point. If you don't and you need to use System Restore you will reinfect yourself. Go to Start>Control Panel>System. Click on the System Restore tab and put a check in Turn off System Restore. Then click OK.
Now go to Start>Help and Support > Undo Changes to Your System or System Restore depending on the make of your PC. Click on what ever will open the System Restore box. You will see two options, Choose Create a System Restore Point. Give it a name like Clean Restore Point and today's date. Now if you need to use it you have it.
Many of infections can be avoided with an added layer of prevention. All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal. Keep MBAM and Spybot Search & Destroy and always immunize SBS&D when you update. You will also need at least one other scanning program Asquared or SuperAntiSpyware are good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use.
A firewall and antivirus are also essential. The Windows firewall in XP and Vista is not sufficient.
Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan.
Keep other software known for vulnerabilities updated also. Use the Secunia Inspector free scan to identify risks in outdated versions.
SpywareBlaster from Javacool Software
The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free
Also the full protection of MBAM is offered at a very low price, from the link in my signature.
-
Download the program, double click to install. That's about it. Update before every scan, there is usually no need to do a full scan, MBAM works just as well with a quick scan.
-
I'm sorry, it's rare that I have to say reformat we can't fix you. But when the machine won't boot to normal it's nearly impossible to clean. But when you get it reformatted start off with some prevention.
Many of infections can be avoided with an added layer of prevention. All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal. Keep MBAM and Spybot Search & Destroy and always immunize SBS&D when you update. You will also need at least one other scanning program Asquared or SuperAntiSpyware are good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use.
A firewall and antivirus are also essential. The Windows firewall in XP and Vista is not sufficient.
Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan.
Keep other software known for vulnerabilities updated also. Use the Secunia Inspector free scan to identify risks in outdated versions.
SpywareBlaster from Javacool Software
The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free
Also the full protection of MBAM is offered at a very low price, from the link in my signature.
Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you.
The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.
-
Please run HJT in scan only and place a check next to the following items and then click fix.
O2 - BHO: XBTP01621 - {F6104497-54FD-4688-9162-5115CC8AB0FB} - C:\PROGRA~1\BEARSH~1\BEARSH~2\MediaBar.dll (file missing)
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare applications\BearShare MediaBar\MediaBar.dll (file missing)
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
RR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
3 - URLSearchHook: (no name) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - (no file)
Reboot
You are running an outdated and unsafe version of Java. You need to uninstall it via Add/Remove programs and delete the program file also. Then go here Java Update and install the correct version for your system. Choose the offline installation.
Update MBAM run a quick scan, post that log and a new HJT log. Let me know how things are running now.
-
OK please run HJT again in scan only mode place a check next to the following items and then click fix.
O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)
O20 - AppInit_DLLs: fmoquy.dll rzcatw.dll
You are running an outdated and unsafe version of Java. You need to uninstall it via Add/Remove programs and delete the program file also. Then go here Java Update and install the correct version for your system. Choose the offline installation.
Now please reboot your machine. Update MBAM, run a quick scan, post that log and a new HJT log
-
Update MBAM, run a quick scan post that log and a HJT log.
-
Well, malware can cause slow down even after removed. Run a disk error check, and then defragment . Let's see one more MBAM scan be sure to update, and a new HJT log.
-
Please delete Combo Fix and post a HJT log.
-
I'm trying to help you. Items that are in msconfig are not necessarily on the machine. Please do as requested with SBS&D update MBAM, run a quick scan, post that log and a new HJT log.
-
It is a policy of this site we do not engage in anything that can be used illegally. Please update MBAM run a quick scan post that log and a HJT log.
-
I would have to cut/paste the log to my working PC (the one I'm currently using!) and I'm reluctant to copy anything from the infected PC, which has no working internet comms so the MBAM log below is copied by hand (hopefully no mistakes!)
You have nothing to worry about using copy/paste with text. Please show us what we need to HiJack This!
-
Scan the file at www.virustotal.com and see. It may or may not be. I think you should do a reformat. You have serious system damage and or malware that cannot be removed with out a full boot up.
-
Heh, well IMO IE is always unreliable. Maybe try a repair install on it.
something is wrong
in Resolved Malware Removal Logs
Posted
Reboot is restart the machine. When you start the machine it is called booting up. So to reboot is to start again. The correct version will be the one for windows JRE not developers or any others. If you go to the site I think you'll see what is there to choose from.