Windows 7 Media Center Virus

[Suzzet]

I running Windows 7 84 bit got the Media Center Virus when I downloaded a 34 bit free code thingy, next thing I knew everything was turning into windows media center, I deleted and uninstalled anything I thought might be linked to it. I was not able to get online the conventional way but through a link I have in my doc, and from there tried to find out how to resolve this online, I learned to go to the control panel, select programs then to select turn on/off windows features, so the "Windows Media Virus" gone, in addition I created another user account, scanned Norton, Spyhunter, Malwarebytes in user and administrative accounts and scanned but nothing seems to detect it, because I'll check it by rebooting and then turning on/off the Windows Media Center box again, and Boom, it's like it becomes stronger and stronger, not sure if I should just leave the media center in the off position, or is it something I should be worried about? 

[AdvancedSetup]

Hello @Suzzet and

It may just be a setting on your  system. Please run the following though and we'll see what we can find to help address the issue for you.

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

• If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• If you don't have Malwarebytes 3 installed yet please download it from here and install it.
• Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
• If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

• Right-click on the program and select Run as Administrator to start the tool.
• Accept the Terms of use.
• Wait until the database is updated.
• Click Scan Now.
• When finished, please click Clean & Repair.
• Your PC should reboot now if any items were found.
• After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
• Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

[Suzzet]

Hi!

Thank you for your reply!

I had downloaded free trial Malwarebytes yesterday and 1st scan had over 150 possibles that were cleaned, I didn't correctly save that original scan results.

Here is today's, I hope I did this right. 

 

Scan5thTimeResultsMalwarebytes.txt

AdwCleaner1stScan[C00].txt

FRST.txt

Farbar1stScanAddition.txt

[AdvancedSetup]

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

 

Thanks, Ron

 

[Suzzet]

Hi Ron, 

Thank you for your help! Here it is 

Fixlog.txt

[AdvancedSetup]

Great, that looks good. Please run a new scan with Malwarebytes and post back that new log.

How is the computer running now?

Are you still having or seeing any signs of an infection?

 

[Suzzet]

Ran scan, enclosed. The only way I can find out if the virus is still active is to 'turn on' the windows feature titled "Windows Media Center" and then reboot. I'll do that to verify repair, ok. 

MalwarebytesScan2.txt

[AdvancedSetup]

Please do, and if there is an issue, please take a screen shot to show what issue you're seeing if still there.

Thanks

 

[Suzzet]

While "Media Center" is still on I switched users and ran scans,  so now I'll reboot and get you some screen shots. Thanks again!  

Addition.txt

MBScanInGuestModeWMCActiveInAdminstr.txt

FRST.txt

[AdvancedSetup]

You need to use an Administrator account when running these scans or fixes please.

Ran by Caca (ATTENTION: The user is not administrator) on EMACHINES-PC (27-09-2018 17:26:52)

 

[Suzzet]

Hi Thank you!

I'm running win 84 bit and went and downloaded a 34 bit program here sourceforge.net/projects/kid3/ and got a warning about the file not being safe from Norton but downloaded it anyway. So this might be a software conflict and hopefully not a virus/malware. 

When the windows media center is On, nothing works in Administration at fist only some things turn green with the windows media center logo, then after a while everything dose and if one clicks on anything  the windows media window opens, Windows word I get into, that's about it.   So I have to go into Guest Caca to turn off Windows Media, because it won't turn off even in safe Mode. 

Thank you. 

PS  I also have video. 

[AdvancedSetup]

Please start into Normal Mode with an Administrator account.

Then run the following. Click on Start and type in CMD.EXE and when it shows on the menu right click and choose "Run as administrator"

Then type in the following.

SFC   /SCANNOW

That should run and verify the Windows files of the operating system. Then post back the results shown at the bottom of the command windows once it's done running.

I'm heading out but will check back on you in a few hours later tonight.

Ron

 

[Suzzet]

Hi, Thank you, I do hope you get some rest, will be back tomorrow!

The results are:

Windows Resource Protection Found corrupt files and successfully repaired them. Details are included in the CBS.Log windir/Logs/CBS/CBS.log For example c:/Windows/Logs/CBS/CBS.log c:/Windows/system32> 

[AdvancedSetup]

Great, glad to hear it was able to find and fix.

Let me have you run a new FRST scan and make sure you place a check mark in the Additons.txt check box and post back  both new logs as an attachment.

Thanks

Ron

 

[Suzzet]

Hi Ron, Good morning, I did a Norton file clean up and optimized disc before seeing your instructions, as computer was running slow to get online. 

 Here are the two uploads you requested.  Thank you! 

Addition.txt

FRST.txt

[Suzzet]

Hi, I went in and activated windows media center to see if it was gone, entered Safe Mode to find the same windows media center in files. Turned the Media Center off in guest account. Shut down, Re-scanned in CMD.EXE with results being Resources did not find any integrity violations C:/window/system32> and scanned in FRST

Addition.txt

FRST.txt

[AdvancedSetup]

Good day. Please run the following fix. I don't think it's going to correct the Media Center issue but it will clean up and remove some invalid settings. I will also try to reset your MSCONFIG back to normal.

Please read the following article concerning the use of MSCONFIG
Msconfig Is Not A Startup Manager

 

 

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Thanks, Ron

 

[Suzzet]

Hi, I downloaded and opened the Autoruns you suggested, (I didn't push any other buttons) rebooted then ran FRST64 enclosed log.

Thank you so much! 

Suzzet

Fixlog.txt

[AdvancedSetup]

Log looks good. If you're still having issues with Media Center you might need to open a new topic in the PC General Help forum or visit one of the Microsoft Support forums. Wish I could help there but not seeing an obvious issue and I've never really used Media Center - I've always used 3rd party programs to do all of that.

Cheers

Ron

 

[Suzzet]

Thank you Ron for all of your help! I had been in a state of dire panic for a week! You helped a lot! 

I think I'll leave the Media Center box unchecked! 

Have a happy day! 

Susan 

[AdvancedSetup]

You're quite welcome @Suzzet  Susan.

Take care and have a great Weekend.

Cheers, Ron

 

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks