I am pretty sure I have something still...

[Paleo321]

Hi so I thought I could take care of my infection myself (in retrospect poor decision)and I don't think I got everything I ran a few programs already but I still think there is something up with my computer it just doesn't seem right. I have downloaded RogueKiller, Malwarebytes and hitman pro as well as some other stuff I just really don't know what I am looking for. I will attach some reports after I close this browser and run the programs again. Any help would be greatly appreciated. thanks

 

 

RKreport0_S_03302014_153528.txt

[Paleo321]

Rkill 2.6.5 by Lawrence Abrams (Grinler)

http://www.bleepingcomputer.com/

Copyright 2008-2014 BleepingComputer.com

More Information about Rkill can be found at this link:

 http://www.bleepingcomputer.com/forums/topic308364.html

 

Program started at: 03/30/2014 03:58:26 PM in x64 mode.

Windows Version: Windows 7 Home Premium Service Pack 1

 

Checking for Windows services to stop:

 

 * No malware services found to stop.

 

Checking for processes to terminate:

 

 * No malware processes found to kill.

 

Checking Registry for malware related settings:

 

 * No issues found in the Registry.

 

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

 

Performing miscellaneous checks:

 

 * Windows Defender Disabled

 

   [HKLM\SOFTWARE\Microsoft\Windows Defender]

   "DisableAntiSpyware" = dword:00000001

 

Checking Windows Service Integrity: 

 

 * Windows Defender (WinDefend) is not Running.

   Startup Type set to: Manual

 

Searching for Missing Digital Signatures: 

 

Checking Windows Service Integrity: 

 

 * Windows Defender (WinDefend) is not Running.

   Startup Type set to: Manual

 

Searching for Missing Digital Signatures: 

 

 * No issues found.

 

Checking HOSTS File: 

 

 * No issues found.

 

 * No issues found.

 

Checking HOSTS File: 

 

 * No issues found.

 

Program finished at: 03/30/2014 03:58:43 PM

Execution time: 0 hours(s), 0 minute(s), and 16 seconds(s)

 

Program finished at: 03/30/2014 03:58:43 PM

Execution time: 0 hours(s), 2 minute(s), and 9 seconds(s)

[Paleo321]

 

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : Allie [Admin rights]

Mode : Scan -- Date : 03/30/2014 16:04:34

| ARK || FAK || MBR |

 

¤¤¤ Bad processes : 0 ¤¤¤

 

¤¤¤ Registry Entries : 0 ¤¤¤

 

¤¤¤ Scheduled tasks : 0 ¤¤¤

 

¤¤¤ Startup Entries : 0 ¤¤¤

 

¤¤¤ Web browsers : 0 ¤¤¤

 

¤¤¤ Browser Addons : 0 ¤¤¤

 

¤¤¤ Particular Files / Folders: ¤¤¤

 

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

 

¤¤¤ External Hives: ¤¤¤

 

¤¤¤ Infection :  ¤¤¤

 

¤¤¤ HOSTS File: ¤¤¤

--> %SystemRoot%\System32\drivers\etc\hosts

 

 

 

 

¤¤¤ MBR Check: ¤¤¤

 

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS545050B9A300 +++++

--- User ---

[MBR] acefffeada8e1305eaa23647cfbe123b

[bSP] 4d4d76b7cac178d45220de70d6747161 : Windows 7/8 MBR Code

Partition table:

0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 14336 MB

1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 29362176 | Size: 100 MB

2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 29566976 | Size: 462502 MB

User = LL1 ... OK!

User = LL2 ... OK!

 

Finished : << RKreport[0]_S_03302014_160434.txt >>

RKreport[0]_S_03292014_214105.txt;RKreport[0]_S_03302014_153528.txt

[Paleo321]

# AdwCleaner v3.022 - Report created 30/03/2014 at 16:12:47

# Updated 13/03/2014 by Xplode

# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

# Username : Allie - ALLIELAPTOP

# Running from : C:\Users\Allie\Downloads\adwcleaner (1).exe

# Option : Clean

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

 

***** [ Browsers ] *****

 

-\\ Internet Explorer v8.0.7601.17514

 

 

-\\ Google Chrome v33.0.1750.154

 

[ File : C:\Users\Allie\AppData\Local\Google\Chrome\User Data\Default\preferences ]

 

 

*************************

 

AdwCleaner[R0].txt - [1250 octets] - [29/03/2014 21:11:12]

AdwCleaner[R1].txt - [1310 octets] - [29/03/2014 21:43:42]

AdwCleaner[R2].txt - [945 octets] - [29/03/2014 23:29:35]

AdwCleaner[R3].txt - [1068 octets] - [30/03/2014 16:09:17]

AdwCleaner[s0].txt - [1385 octets] - [29/03/2014 21:45:48]

AdwCleaner[s1].txt - [1005 octets] - [29/03/2014 23:30:38]

AdwCleaner[s2].txt - [991 octets] - [30/03/2014 16:12:47]

 

########## EOF - C:\AdwCleaner\AdwCleaner[s2].txt - [1050 octets] ##########

[Paleo321]

tried to run gmer and it froze...tried mrt and ran for 3 hours and i left the room came back in and my laptop was off? there is csrss.exe running with no discription but if I am in safe mode there are 2 with descriptions and they open file location where as regular windows there is 1 and i can't touch it is that normal?

[AdvancedSetup]

Sorry for the delay. In reviewing old topics I noticed no one had replied to this one.  If you still need help please let me know.

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!