mb21784 Posted October 23, 2014 ID:894676 Share Posted October 23, 2014 Like many others, I am having the syswow64/dllhost.exe problem. Malwarebytes continually pops a block of outbound traffic. A full Threat scan with PUP and PUM treated as malware returned nothing to quarantine. I have attached the FRST64 scans as well as the RogueKiller report if they will be helpful. Any suggestions?Addition.txtFRST.txtRKreport_SCN_10222014_211612.log Link to post Share on other sites More sharing options...
MrCharlie Posted October 23, 2014 ID:894680 Share Posted October 23, 2014 Make sure you have created a restore point and..... Download Delfix from Here and save it to your desktop.Place a check mark in front of .......Create registry backup <---only!Uncheck the rest!Click the Run button. Close the tool out when it's done....we'll use it later. ==================== Download the attached fixlist.txt to the same folder as FRST.exe/FRST64.exe. Run FRST.exe/FRST64.exe and click Fix only once and wait The tool will create a log (Fixlog.txt) in the folder, please post it to your reply. =================== Please download and run ComboFix. The most important things to remember when running it is to disable all your malware programs and run Combofix from your desktop. Please visit this webpage for download links, and instructions for running ComboFix http://www.bleepingcomputer.com/combofix/how-to-use-combofix http://www.bleepingcomputer.com/download/combofix/dl/12/ <---ComboFix direct download Please make sure you click download buttons that look similar to this, not "sponsored ad links": Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. Information on disabling your malware programs can be found Here. Make sure you run ComboFix from your desktop. Give it at least 30-45 minutes to finish if needed. Please include the C:\ComboFix.txt in your next reply for further review. ---------->NOTE<----------If you get the message Illegal operation attempted on registry key that has been marked for deletion after you run ComboFix....please reboot the computer, this should resolve the problem. You may have to do this several times if needed. MrC Link to post Share on other sites More sharing options...
mb21784 Posted October 23, 2014 Author ID:894712 Share Posted October 23, 2014 Attached logs as requested.Fixlog.txtComboFix.txt Link to post Share on other sites More sharing options...
mb21784 Posted October 23, 2014 Author ID:894893 Share Posted October 23, 2014 Hi MrC. Just to confirm, I completed the previous steps. Link to post Share on other sites More sharing options...
MrCharlie Posted October 23, 2014 ID:894898 Share Posted October 23, 2014 Looks Good....How is it????? Would you like to check for any adware while you're here?? MrC Link to post Share on other sites More sharing options...
mb21784 Posted October 23, 2014 Author ID:894921 Share Posted October 23, 2014 That seems to have done the trick. Thanks. I will check for Adware separately. Link to post Share on other sites More sharing options...
MrCharlie Posted October 23, 2014 ID:894931 Share Posted October 23, 2014 OK...... Lets check your computers security before you go and we have a little cleanup to do also: Download Security Check by screen317 from HERE or HERE.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.If you get Unsupported operating system. Aborting now, just reboot and try again.A Notepad document should open automatically called checkup.txt.Please Post the contents of that document.Do Not Attach It!!!MrC Link to post Share on other sites More sharing options...
mb21784 Posted October 23, 2014 Author ID:894946 Share Posted October 23, 2014 The results of Security Check: Results of screen317's Security Check version 0.99.89 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! Norton Security Suite WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Java 6 Update 35 Java 7 Update 71 Java version out of Date! Adobe Reader 10.1.10 Adobe Reader out of Date! Mozilla Firefox 32.0.3 Firefox out of Date! ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Malwarebytes Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: 2% ````````````````````End of Log`````````````````````` Link to post Share on other sites More sharing options...
MrCharlie Posted October 23, 2014 ID:894950 Share Posted October 23, 2014 Out dated programs on the system are vulnerable to malware.Please update or uninstall them:=================================Java™ 6 Update 35 <----uninstall if possible (it may have already been uninstalled)Java 7 Update 71 <-----OKJava version out of Date!=======================Adobe Reader 10.1.10 Adobe Reader out of Date! <---please check for an update if available or uninstall and download and install Foxit Reader which is less vulnerable to malware and much better than Adobe. Don't install any toolbars that may come with it (ASK Toolbar).============================Mozilla Firefox 32.0.3 Firefox out of Date! <----please check for an update if available.=========================A little clean up to do....Please Uninstall ComboFix: (------->if you used it<-------)Press the Windows logo key + R to bring up the "run box"Copy and paste next command in the field:ComboFix /uninstallMake sure there's a space between Combofix and /Then hit enter. (it may look like CF is re-installing but it's not)This will uninstall Combofix, delete its related folders and files, hide file extensions, hide the system/hidden files and clears System Restore cache and create new Restore point(If that doesn't work.....you can simply rename ComboFix.exe to Uninstall.exe and double click it to complete the uninstall or download and run the uninstaller)---------------------------------Download Delfix from here and save it to your desktop. (you may already have this)Ensure Remove disinfection tools is checked.Click the Run button.RebootAny other programs or logs that are still remaining, you can manually delete. (right click.....Delete)IE: RogueKiller.exe, RKreport.txt, RK_Quarantine folder, C:\FRST folder, FRST-OlderVersion folder, MBAR folder, etc....AdwCleaner > just run the program and click uninstall.Note:If you used FRST and can't delete the quarantine folder:Download the fixlist.txt to the same folder as FRST.exe.Run FRST.exe and click Fix only once and waitThat will delete the quarantine folder created by FRST.The rest you can manually delete.-------------------------------Any questions...please post back.If you think I've helped you, please leave a comment > click on my avatar picture > click Profile Feed.Take a look at My Preventive Maintenance to avoid being infected again.Good Luck and Thanks for using the forum, MrC Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 25, 2014 Root Admin ID:895947 Share Posted October 25, 2014 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts