JeanInMontana
-
Posts
3,859 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by JeanInMontana
-
-
Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you.
The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.
-
Hi Barrackade and welcome to Malwarebytes. First please update MBAM your two versions behind. Second, move HJT from the desktop to Program Files into it's own folder. Now run a new quick scan with MBAM and post that log and then run HJT and post that log.
-
MBAM is not an anti virus program and she needs both. Try Avira or Avast both are free and good programs. You need an antivirus with MBAM.
-
CPU usage and memory usage are not the same thing. They are in separate columns in the Task Manager. I'm asking a second opinion on some stuff in your CF log.
Run HJT in scan only and put a check next to the following then click fix.
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O9 - Extra button: Panda ActiveScan - {653D93AF-C741-4e5e-8C1B-59BA43F93E16} - http://www.pandasoftware.com/activescan (file missing)
Reboot and update MBAM run a new scan with it and a new HJT log please.
OK adding this, we don't think you have malware, but did you install SP3 via Windows Updates? Lots of evidence in you CF log to show you might have. This could very well be the cause of your problems. Best thing would be uninstall and order the CD or download the files manually and install that way. It's always handy to have the CD, I got one for $10.00.
-
Oops we need to get HJT off the desktop. It should be in a folder all it's own in program files. Please move it, update MBAM to the new version and do a quick scan post that log and anew HJT log from the correct location please.
-
OK let's go for another special scan tool.
Download GMER get the zip file and save to your desktop.
Just run gmer.exe. All required files ( gmer.dll and gmer.sys ) will by copied to the system during the first lanuch. .
Do not click scan.Use the copy button to copy to your clipboard. Post the log in your next reply.
-
-
Yay!! Glad we did the job!
-
C:\Program Files\IEInspector\HTTPAnalyzerFullV2\InjectWinSockServiceV2.exe <========= What is that? I find mixed results.
-
I'll try to get to an indepth tomorrow. Just can't today.
-
Please read and follow the instructions. Update MBAM do a quick scan post that log. Run a scan with HJT post that log. If you can't follow these simple instructions I give up.
-
If your actually looking in Task Manger when the CPU is at 100% you have to see what is using that to make it 100%. Use the Processes tab and it will show CPU usage and what is using it along with all processes running.
Review this article here how to use ComboFix
Be sure you cover the section on How to install and use the Windows XP Recovery Console and make sure it is installed on your machine. This is important should anything go wrong and we need to recover your PC and not lose all the data.
1. Download this file :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe save it to your desktop.
2. Double click combofix.exe. It will be a red icon with a white X on your desktop.
Follow the prompts you will get a blue cmd prompt screen and a choice to choose Y or N. Choose Y and hit enter.
3. When finished, it shall produce a log for you. This logfile is located at C:\ComboFix.txt.
Post that log and a HiJack log in your next reply
Note:
Do not mouseclick combofix's window while its running. That may cause it to stall.
-
Well now what do you have going on? I'm going to have the person that wanted the CF log have a look here. There were deletions, I'm a sick pup right now, but getting antibiotics so will be better soon. I'll shoot this url to nosirrah and if he replies here please cooperate.
-
What did Kasperski's remove? I need complete details not vague references. I didn't get a HJT log either. Do you have the Task Manager open when the CPU goes to 100%? It should show what is using it.
-
I didn't get a HJT log after the scan. So, update MBAM again and do a quickscan, post that log and a new HJT.
-
Sunshine you have a thread in the HJT forum. Stick with that and follow those instructions. Posting all over this site is only going to get you and everyone else confused.
-
I'm guessing this is because malware often hides the control panel. Why do you want to do that? It is an essential Windows component.
-
I did a search with a FF extension made specifically for malware searches. That's what I got from Threat Expert. If nosirrah says it's a F/P then that's where I would put my $. There is also here . I don't think you searched very well, it has mixed reviews. http://www.google.com/search?q=secdrv&...lient=firefox-a
-
Hello Nickzz and welcome to Malwarebytes. Our lead researcher requests you post a log from this program HiJack This! please.
-
-
Hi mmv and welcome to Malwarebytes. So nice of Symantec
They are gaining fame an notoriety for their poor customer service. Is the Windows Security Center giving you this warning? Or malware? Do you have anti virus and firewall? You do need both on top of MBAM. If you want to be sure your free of infection go here and follow the instructions, then start your own topic in that forum. -
Well I don't think your problem is or ever was malware. But to be absolute we will do this.
Review this article here how to use ComboFix
Be sure you cover the section on How to install and use the Windows XP Recovery Console and make sure it is installed on your machine. This is important should anything go wrong and we need to recover your PC and not lose all the data.
1. Download this file :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe save it to your desktop.
2. Double click combofix.exe. It will be a red icon with a white X on your desktop.
Follow the prompts you will get a blue cmd prompt screen and a choice to choose Y or N. Choose Y and hit enter.
3. When finished, it shall produce a log for you. This logfile is located at C:\ComboFix.txt.
Post that log and a HiJack log in your next reply
Note:
Do not mouseclick combofix's window while its running. That may cause it to stall.
You might also want to post event logs in the PC help forum and let more people have access to your issues.
-
When you get back update MBAM and run a quick scan, post that log and a new HJT log. Looks like we made some huge progress.
-
OK I only see one thing of concern here and it's not malware.
O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing) <=========== probably need to reinstall QuickBooks to fix that.
Otherwise how is it running?
Unable to remove MyWebSearch and FunWeb
in Resolved Malware Removal Logs
Posted
Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic.
Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.