Root Admin AdvancedSetup Posted October 4, 2014 Root Admin ID:886320 Share Posted October 4, 2014 How is the computer running now?Are there still any signs of an infection? Please download Security Check by screen317 from HERE or HERE.Save it to your Desktop. Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box. If you get Unsupported operating system. Aborting now, just reboot and try again. A Notepad document should open automatically called checkup.txt. Please Post the contents of that document. Do Not Attach It!!! Link to post Share on other sites More sharing options...
curlew Posted October 4, 2014 Author ID:886381 Share Posted October 4, 2014 computer does appear to be running a lot smootherhas for infections i think the computer also seems to be clear, no doubt my boy downloading gamesor my other half using computer with AV turned off will change that at some point, and they wonder why i dont let them use my computer Results of screen317's Security Check version 0.99.88 Windows Vista Service Pack 2 x86 (UAC is enabled) Internet Explorer 9 Internet Explorer 8 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! WMI entry may not exist for antivirus; attempting automatic update.`````````Anti-malware/Other Utilities Check:````````` WinPatrol Spybot - Search & Destroy SUPERAntiSpyware AVG PC Tuneup CCleaner Wise Registry Cleaner 8.22 SlimCleaner FixCleaner Adobe Flash Player 15.0.0.152 Adobe Reader 10.1.12 Adobe Reader out of Date! Mozilla Firefox (32.0.2) Google Chrome 37.0.2062.120 Google Chrome 37.0.2062.124 ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials MSMpEng.exe WinPatrol winpatrol.exe is disabled! Comodo Firewall cmdagent.exe Kaspersky Lab Kaspersky Security Scan 2.0 kss.exe Trend Micro RUBotted RUBotSrv.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: 0 %````````````````````End of Log`````````````````````` Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 5, 2014 Root Admin ID:886590 Share Posted October 5, 2014 Sounds good. Please open your Adobe Reader and check for updates to make sure it's up to date. Read the following about your " Wise Registry Cleaner 8.22 " Do I need a Windows Registry Cleaner? Check and make sure your WinPatrol is running how you want it. At this time there are no more signs of an infection on your system. However if you are still seeing any signs of an infection please let me know. Let's go ahead and remove the tools and logs we've used during this process. Most of the tools used are potentially dangerous to use unsupervised or if ran at the wrong time. They are often updated daily so if you went to use them again in the future they would be outdated anyways. The following procedures will implement some cleanup procedures to remove these tools. Download Delfix from here and save it to your desktop. (you may already have this)Ensure Remove disinfection tools is checked.Click the Run button.RebootAny other programs or logs that are still remaining, you can manually delete. (right click.....Delete) IE: RogueKiller.exe, RKreport.txt, RK_Quarantine folder, C:\FRST folder, FRST-OlderVersion folder, MBAR folder, etc....AdwCleaner > just run the program and click uninstall. Note: If you used FRST and can't delete the quarantine folder: Download the fixlist.txt to the same folder as FRST.exe. Run FRST.exe and click Fix only once and wait That will delete the quarantine folder created by FRST. The rest you can manually delete. If there are any other left over Folders, Files, Logs then you can delete them on your own. Please visit the following link to see how to delete old System Restore Points. Please delete all of them and create a new one at this time. How to Delete System Protection Restore Points in Windows 7 and Windows 8 Remove all but the most recent Restore Point on Windows XP As Java seems to get exploited on a regular basis I advise not using Java if possible but to at least disable java in your web browsers How do I disable Java in my web browser? - Disable Java A lot of reading here but if you take the time to read a bit of it you'll see why/how infections and general damage are so easily inflicted on the computer. There is also advice on how to prevent it and keep the system working well. Don't forget about good, solid backups of your data to an external drive that is not connected except when backing up your data. If you leave a backup drive connected and you do get infected it can easily damage, encrypt, delete, or corrupt your backups as well and then you'd lose all data. Nothing is 100% bulletproof but with a little bit of education you can certainly swing things in your favor.How Malware Spreads - How did I get infectedBest Practices for Safe Computing - Prevention of Malware InfectionAvoiding those unwanted free applicationsA close look at how Oracle installs deceptive software with Java updatesIAC / Ask.com toolbarsMalwarebytes Unpacked BlogIf you're not currently using Malwarebytes Premium then you may want to consider purchasing the product which can also help greatly reduce the risk of a future infection. Link to post Share on other sites More sharing options...
curlew Posted October 5, 2014 Author ID:886686 Share Posted October 5, 2014 ok done the above , looked up on google how to remove vista restore points.malwarebytes will still not run, it opens and terminates when hitting scan or update Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 7, 2014 Root Admin ID:887267 Share Posted October 7, 2014 Please uninstall your current version of MBAM then reboot. Then download an install the latest Release Candidate of MBAM and then temporarily disable your antivirus and install MBAM, update it and try to scan with it and let me know how that goes. https://forums.malwarebytes.org/index.php?/topic/158226-malwarebytes-anti-malware-203-release-candidate-1/ Thanks Link to post Share on other sites More sharing options...
curlew Posted October 7, 2014 Author ID:887523 Share Posted October 7, 2014 this has worked fine and i have run MBAM twice, 300+ pups on first scan89 on second scan (dam boy keeps using online games etc) Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 7, 2014 Root Admin ID:887601 Share Posted October 7, 2014 Great, glad that resolved the running of MBAM for you. I'll go ahead and close your topic then but please review the posted information to help keep the computer safe. Take care Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 7, 2014 Root Admin ID:887602 Share Posted October 7, 2014 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts