nwahs Posted January 13, 2015 ID:929134 Share Posted January 13, 2015 Hello. System32 folder opens at startup and repeatedly on itself when the machine is still on. Noticed a DRVSTORE file folder that appears in blue text dated 8/12/2014. I have no problems running the machine smoothly. Did a MBAM threat scan and returns nothing.Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 13/1/2015Scan Time: 8:05:27 PMLogfile: v.txtAdministrator: YesVersion: 2.00.4.1028Malware Database: v2015.01.13.06Rootkit Database: v2015.01.07.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: ShawnScan Type: Threat ScanResult: CompletedObjects Scanned: 324358Time Elapsed: 4 min, 14 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 0(No malicious items detected)Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 0(No malicious items detected)Files: 0(No malicious items detected)Physical Sectors: 0(No malicious items detected)(end) Link to post Share on other sites More sharing options...
kevinf80 Posted January 13, 2015 ID:929142 Share Posted January 13, 2015 Hello and welome, P2P/Piracy Warning: If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy. Download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. Kevin... Link to post Share on other sites More sharing options...
nwahs Posted January 13, 2015 Author ID:929151 Share Posted January 13, 2015 Hello Kevin, Thank you for your reply. Attached are the log files that you have requested.Addition.txtFRST.txt Link to post Share on other sites More sharing options...
kevinf80 Posted January 13, 2015 ID:929194 Share Posted January 13, 2015 Do not see any obvious malware/infection in those logs, run the following: Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Run FRST and press the Fix button just once and wait.The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.Fixlist.txt Link to post Share on other sites More sharing options...
nwahs Posted January 14, 2015 Author ID:929386 Share Posted January 14, 2015 Attached is the fixlog.txt file. Fixlog.txt Link to post Share on other sites More sharing options...
kevinf80 Posted January 14, 2015 ID:929422 Share Posted January 14, 2015 Click the Start button at the bottom left of the screen, type msconfig in the search box and hit Enter, Select the startup tab in msconfig window, post a screen shot of that window please... Link to post Share on other sites More sharing options...
nwahs Posted January 15, 2015 Author ID:929573 Share Posted January 15, 2015 Attached is the msconfig screenshot. Link to post Share on other sites More sharing options...
kevinf80 Posted January 15, 2015 ID:929626 Share Posted January 15, 2015 Thanks for the image, I was expectiong to see a blank entry with a ticked box... Ok run your system in a "Clean Boot" state, see if the issue continues. Basically all none MS services are disabled at boot, if the issues clears we can start a process of elimination to find the cause... Go to this link: http://support.microsoft.com/kb/929135 expand the option for windows 7 and follow the instructions, let me know if the issue clears with all none MS services disabled.... Thank you, Kevin Link to post Share on other sites More sharing options...
nwahs Posted January 16, 2015 Author ID:929798 Share Posted January 16, 2015 Kevin, the problem still persists after following your instructions to disable all non MS services at boot. Link to post Share on other sites More sharing options...
nwahs Posted January 16, 2015 Author ID:929819 Share Posted January 16, 2015 Hi Kevin, I have decided to do a full windows format to my machine. Thank you for your effort into helping me. Have a nice day ahead. Link to post Share on other sites More sharing options...
kevinf80 Posted January 16, 2015 ID:929895 Share Posted January 16, 2015 OK, thanks for the update. take care and surf safe.... Kevin... Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 19, 2015 Root Admin ID:930864 Share Posted January 19, 2015 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts