RockunRoll

Hard luck. Again and again, problem returns. My computer has went thru numerous forced shut downs that check disks ran a a couple of times. No way that I can allow this version 1.7 to continue to cause further damage to my computer. I already lodged a complaint email to support. Lets see what they revert.

Hi daledoc1, thank you for your intervention here. I d/l and installed afresh a copy of the pro version, rebooted without doing a quick launch as recommended. After powerup, in addition I check (marked) the protection settings which I had set up before this version, updated the database, did a quick scan, then a full scan. Now all seems working fine. But still the load up (power up) of my OS in my m/c still somewhat slower than before. Let me continue monitor, and if need to, resume additional postings here. Meanwhile I believe lets pend alerting your customer support.

Yes, as a pro version user I encountered problems. Very bad, unfinished product. Why do these people ripped us off with a poorly finished product? Dented my trust in them. I was prompted by a notification in my task tray to installed a new version - off it go while it was starting installation, it also auto removed the old one. I did not launch the s/w immediately after installation, proceeded to restart my m/c. Oops, got 'hanged' on the welcome screen, my m/c took ages to load win 7. Fed up I forced shut down, boot on safe mode which was ok. Checked the malware bytes found the version 1.7 alright. Unconvinced I reboot normal mode, oops again second time, the m/c took another ages to start up, at the welcome screen on my m/c, the small centre welcome circle icon, turn and turn and turn non-stop. I forced stop by unplugging mains, reboot via start windows normally, and then decided I need to remove the program. Surprisingly it failed, dialog came out saying 'files are corrupted, please get another copy..'. Left with no choice did another force shut via unplugging the mains, goot on safe mode, uninstall the program. Now I am at a COMPLETE loss, what to do next , as my machine has no anti malware program.

Right, Everything cleaned up, logs, lock stock and all. Ok so indeed I got this Win Command Processor. How did I possibly got this and what this bastard actually do ? Did you also happen to 'see' anything nasty or unwelcomed as well? Thanks for your many days of efforts and time expended. Most certainly I ll comment on the profle feed.

Sorry for not making myself understood. I am mindful now as you guys are out there tackling 10s of queries from infected folks so I need to be short sweet and sharp. " " And in particular as I mentioned earlier, how come in the tas manager window at the top left besides the process tab, I noticed the sentence, 'windows command processor is waiting for your instructions...' Can you take a screen shot of that and post it? " " - this one was a one-off occurence that I chanced upon. If it happen again, I ll show u the screen shot. " " OK, some questions for you because I don't understand all your questions: You're saying disk check runs every time the computer boots up? " " - after all those actions you instructed me to execute through in the last some days, now it does not happen anymore, hopefully still wont going forward. Initially it did with no ryhme or reason which is why set me to seek help from you guys. " " Quote what is the last op for not this mbam scan, the OTL one I don't understand what you mean here?? " " - I mean what is the OTL operation/scanning for - which I did wrong remember when I click on scan instead of run fix? " " Quote Secondly, is there any of those s/w's which you instructed me to d/l to use, can be kept for my own routine use once in a while if I just play safe to use them to clean anything, eg the Roguekiller, this OTL, the DDS? I don't understand this also. " " - I am referring to those various cleaning tools, checking tools that I had them saved on my desktop. Can I run them to do my own checking in future if needed, without assistance from you folks, especially those like I used it on my own, the TDSS? " " Quote And over to you, anything you like to leave me? Yes we have to do some cleanup. " " - Ok what clean up? Thanks.

I would need to observe more in the coming days to see how it behaves esp on the startup disk checks as compared to before (because I normally religiously follow a proper shut down routine in order to preserve my HD life span. So I see no good reason why when boot up the computer needs a disk check recently. And in particular as I mentioned earlier, how come in the tas manager window at the top left besides the process tab, I noticed the sentence, 'windows command processor is waiting for your instructions...' I do hope there's really nothing ultra-malicious lurking inside. I really do express my gratitude of your spending time, being patience, in engaging to help me over the last few days. I do feel guilty somewhat though thru no fault of mine to need to trouble people like you. Just through this episode, may I ask, 2 things, what is the last op for not this mbam scan, the OTL one? Secondly, is there any of those s/w's which you instructed me to d/l to use, can be kept for my own routine use once in a while if I just play safe to use them to clean anything, eg the Roguekiller, this OTL, the DDS? And over to you, anything you like to leave me? If this post is locked later say after the next few days, how am I going to inform you the computer us running? Thanks a bundle.

I did the quick scan fyi also disabling the eset.

Here's the quick scan done after updating the MBAM. Nothing on or related to the 'remove selected' friend. Malwarebytes Anti-Malware 1.62.0.1300 www.malwarebytes.org Database version: v2012.07.20.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Terence :: TERENCEHPENVY14 [administrator] Protection: Enabled 21-Jul-12 00:05:23 mbam-log-2012-07-21 (00-05-23).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 202190 Time elapsed: 2 minute(s), 45 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)

ok, just to be sure again, when you said perform quick scan, is it the top one? Because below is the full scan, followed by flash scan. Please confirm. Then please elaborate 'remove selected', kindly explain more, thanks.

Ok here I am, and I believe this time I did it right - I disable my Eset Sec s/w both AV and F/w, I stopped the Win Defender and Win Firewall, all these. Another thing different I did was I click on the top link instead of the other one below, cut and paste the same thing I did earlier, clcik run fix, very sure. Next what happened the below progress bar ran left to right 2 cycles. Then reboot. After reboot, screen show 'publisher not verified, are you sure you want to run'? sure I clicked yes. This time again almost immediately the log came out, definitely contains much more info the earlier. Hope this time you can see what you need to see. Here it is: All processes killed ========== COMMANDS ========== [EMPTYJAVA] User: All Users User: Default User: Default User User: Public User: Terence ->Java cache emptied: 0 bytes Total Java Files Cleaned = 0.00 mb [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public ->Temp folder emptied: 0 bytes User: Terence ->Temp folder emptied: 0 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 0 bytes ->Google Chrome cache emptied: 0 bytes ->Apple Safari cache emptied: 0 bytes ->Flash cache emptied: 5651 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 3960 bytes Session Manager Temp folder emptied: 6157159 bytes Session Manager Tmp folder emptied: 578760 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 39201 bytes Total Files Cleaned = 7.00 mb OTL by OldTimer - Version 3.2.54.0 log created on 07202012_232001 Files\Folders moved on Reboot... G:\TEMP\{743D08FD-DA2B-484A-9364-BD354C5D3955}\fpb.tmp moved successfully. G:\TEMP\FXSAPIDebugLogFile.txt moved successfully. File\Folder G:\TEMP\~DFACACDE17901D64C1.TMP not found! File\Folder G:\TEMP\~DF8050FA2B02509AB1.TMP not found! File\Folder G:\TEMP\~DFEABDC1435C709FF0.TMP not found! File\Folder G:\TEMP\~DF1A4D63B05CA5A104.TMP not found! PendingFileRenameOperations files... File G:\TEMP\{743D08FD-DA2B-484A-9364-BD354C5D3955}\fpb.tmp not found! File G:\TEMP\FXSAPIDebugLogFile.txt not found! File G:\TEMP\~DFACACDE17901D64C1.TMP not found! File G:\TEMP\~DF8050FA2B02509AB1.TMP not found! File G:\TEMP\~DFEABDC1435C709FF0.TMP not found! File G:\TEMP\~DF1A4D63B05CA5A104.TMP not found! Registry entries deleted on Reboot... Cheers....

Re post due to something left out, sorry : Hello hello. I am back so soon as I thought it will take longer time as earlier because I wanted to run out for my dinner. Anyway., yeah I hit run fix after copy/paste what u told me. It did its job almost in an instant, yes in an instant, no scanning. I clicked yes to reboot and immediately after reboot even when the other start up programs yet to load, ..." screen appeared asking me to allow this program to run or not".... Upon clicking yes, it opened this where I cant save the texts because all the menu were greyed out. Here I copied and paste below: All processes killed Error: Unable to interpret <:Commands[EMPTYJAVA][emptytemp]> in the current context! OTL by OldTimer - Version 3.2.54.0 log created on 07202012_200922 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot... You instructed this - ".... after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTL\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post." I followed exactly, but when *.log and press enter, nothing change, nothing happened..:-(

Hello hello. I am back so soon as I thought it will take longer time as earlier because I wanted to run out for my dinner. Anyway., yeah I hit run fix after copy/paste what u told me. It did its job almost in an instant, yes in an instant, no scanning. I clicked yes to reboot and immediately after reboot even when the other start up programs yet to load, it opened this where I cant save the texts because all the menu were greyed out. Here I copied and paste below: All processes killed Error: Unable to interpret <:Commands[EMPTYJAVA][emptytemp]> in the current context! OTL by OldTimer - Version 3.2.54.0 log created on 07202012_200922 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot... You instructed this - ".... after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTL\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post." I followed exactly, but when *.log and press enter, nothing change, nothing happened..:-(

Oops did I (click scan instead of run fix)? Alright I do it again. Be back to repost in about 2-3 hours later.

Extras.Txt Hello. here's the second log, the Extras.