ihatezbotr Posted January 31, 2013 ID:641487 Share Posted January 31, 2013 Hello Malwarebytes Team!I´m sorry to bother you again, but i have a problem with my laptop again. A few weeks ago i had problems with ZbotR.Gen and Mr.Charlie helped me to remove it. A few days later there were problems with Eset Smart Security 6 and i had to use the removal tool from Eset to fully uninstall it, with the help of you. But there is another problem with my laptop. Since the infection with ZbotR.Gen i have the problem, that when windows will start up, it freezes when the desktop try to load. This happens randomly and only a hard reset will shut the laptop down. Everytime i try to load windows it freezes when it will load the desktop and the only solution is to restore windows from a restore point,but this anly helps for one day or so and then the problem shows again. Before my infection there weren´t any problems like this.Thank you again for your help!!!!!!!!!!!!!!!!!!!!!!dds.txtattach.txt Link to post Share on other sites More sharing options...
MrCharlie Posted January 31, 2013 ID:641532 Share Posted January 31, 2013 Welcome to the forum.Are you using the Pro version of Malwarebytes? (paid version)Please remove any usb or external drives from the computer before you run this scan!Please download and run RogueKiller to your desktop.http://tigzy.geeksto...ueKillerX64.exe <---use this oneQuit all running programs.For Windows XP, double-click to start.For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.Click Scan to scan the system.When the scan completes > Close out the program > Don't Fix anything!Don't run any other options, they're not all bad!!!!!!!Post back the report which should be located on your desktop.MrCPlease don't run any other scans, download, install or uninstall any programs while I'm working with you.Please stick with me until I give you the "all clear".------->Your topic will be closed if you haven't replied within 3 days!<--------(If I don't respond within 24 hours, please send me a PM) Link to post Share on other sites More sharing options...
ihatezbotr Posted January 31, 2013 Author ID:641539 Share Posted January 31, 2013 Thanks Mr. CharlieYes, i use the Pro Version.I have run rogue killer and saw that he delatet a suspicious path but i can´t find the log on my desktop! Link to post Share on other sites More sharing options...
MrCharlie Posted January 31, 2013 ID:641544 Share Posted January 31, 2013 It should be on your desktop.I don't know if this works on W7 but try it.Go to Start > Run > type desktop > Enter (OK)The desktop folder should open, see if it's there.MrC Link to post Share on other sites More sharing options...
ihatezbotr Posted January 31, 2013 Author ID:641548 Share Posted January 31, 2013 Unfortunately, there is no report on my desktop!Only a RK Quaratine folder with the Eula! Link to post Share on other sites More sharing options...
ihatezbotr Posted January 31, 2013 Author ID:641551 Share Posted January 31, 2013 But i have seen that rogue killer said: delatet suspicious path search anonymizer Link to post Share on other sites More sharing options...
ihatezbotr Posted January 31, 2013 Author ID:641552 Share Posted January 31, 2013 Ah i think i understand now.It was the prescann! when i run the scann the programm crashes! Link to post Share on other sites More sharing options...
MrCharlie Posted January 31, 2013 ID:641553 Share Posted January 31, 2013 OK, disable Malwarebytes realtime protection, reboot and see if it still freezes.MrC Link to post Share on other sites More sharing options...
ihatezbotr Posted January 31, 2013 Author ID:641561 Share Posted January 31, 2013 Ok, now it dont freeze but it is REALY slow. Also i tried to run Rogue Killer again. In the Prescann it shows:Delated (Term Proc) Art= SUSP PATH PID 2463 Name= Search Anonymizer Helper.exe Path= C:/Users/Birgit/App Data/Roaming/OCS/SM/Search Anonimizer Helper.exeBut when i click on scann it crashes without a log.Hope that helps! Link to post Share on other sites More sharing options...
MrCharlie Posted January 31, 2013 ID:641579 Share Posted January 31, 2013 Go to your add/remove programs and uninstall > SearchAnonymizerThen.............Go to the link below and set the exclusions of Avast and MB:http://forums.malwar...98Let me know.....MrC Link to post Share on other sites More sharing options...
ihatezbotr Posted January 31, 2013 Author ID:641582 Share Posted January 31, 2013 I think i dont understand, Sorry.But im using Eset Smart Security 6 and not Avast. Or is the Way the same like with avast? Link to post Share on other sites More sharing options...
MrCharlie Posted January 31, 2013 ID:641588 Share Posted January 31, 2013 I'm sorry, but the same applies, see if you can set those exclusions in ESET and MB.Let me know, MrC Link to post Share on other sites More sharing options...
ihatezbotr Posted January 31, 2013 Author ID:641592 Share Posted January 31, 2013 Ok, exklusions set! Link to post Share on other sites More sharing options...
MrCharlie Posted January 31, 2013 ID:641594 Share Posted January 31, 2013 How is it?? MrC Link to post Share on other sites More sharing options...
ihatezbotr Posted January 31, 2013 Author ID:641597 Share Posted January 31, 2013 Ok, im writing from my other laptop now. After a reboot it freezes on the welcome screen. Seems the same as before! The only way to use it again is to restore it in safe mode. Shoul i do this?The funny thing is, after a restore it boots normal 1-2 times and then freezes again. Link to post Share on other sites More sharing options...
MrCharlie Posted January 31, 2013 ID:641605 Share Posted January 31, 2013 Yes, disable Malwarebytes realtime protection.Let me know....MrC Link to post Share on other sites More sharing options...
ihatezbotr Posted January 31, 2013 Author ID:641610 Share Posted January 31, 2013 so, i restored, disabled realtime protection and disabled start with windows. rebooted two times so far and it seems fine. Link to post Share on other sites More sharing options...
MrCharlie Posted January 31, 2013 ID:641611 Share Posted January 31, 2013 I would start a topic here:http://forums.malwarebytes.org/index.php?showforum=41Explain the problem and someone should be able to help you out.You can refer them to this topic also.MrC Link to post Share on other sites More sharing options...
ihatezbotr Posted January 31, 2013 Author ID:641614 Share Posted January 31, 2013 I will do so! Thank you for you help again! Donation is on the way tomorrow! Link to post Share on other sites More sharing options...
MrCharlie Posted January 31, 2013 ID:641627 Share Posted January 31, 2013 Don't worry about a donation....good luck, MrC Link to post Share on other sites More sharing options...
Maurice Naggar Posted February 1, 2013 ID:642276 Share Posted February 1, 2013 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts