ellison Posted May 8, 2011 ID:426525 Share Posted May 8, 2011 Today I downloaded and installed sanity check...http://www.resplendence.com/sanityAfter scanning with it ,it gave me cause for concern.http://www.wilderssecurity.com/showthread.php?p=1869528#post1869528Anyway ,ive scanned with practically every security app that i can think of ,and all of them says im clean ,but sanity check still gives the same results in the thread above when i scan with it.Im using windows 7 64 bit.The g/f also installed sanity check on her w7 64bit machine but doesnt get the results that im getting.My security products are avast AIS and mbam pro which both show no problems.thanks in advanceellison Link to post Share on other sites More sharing options...
MAM Posted May 8, 2011 ID:426530 Share Posted May 8, 2011 Hello, for the first Step, please make this here, I'm infected - What do I do now? Please follow these instructions to clean your system ---> http://forums.malwarebytes.org/index.php?showtopic=9573MAM Link to post Share on other sites More sharing options...
ellison Posted May 8, 2011 Author ID:426541 Share Posted May 8, 2011 Hello, for the first Step, please make this here, I'm infected - What do I do now? Please follow these instructions to clean your system ---> http://forums.malwarebytes.org/index.php?showtopic=9573MAMHeres the logs.tiaellisonDDS.txt Link to post Share on other sites More sharing options...
ellison Posted May 8, 2011 Author ID:426543 Share Posted May 8, 2011 Heres the logs.tiaellisonmmm last post dint go to plan.Heres the logAttach.zip Link to post Share on other sites More sharing options...
MAM Posted May 8, 2011 ID:426546 Share Posted May 8, 2011 And the other Log's, please post us all needed Logs here, to help you out of your mess !MAM Link to post Share on other sites More sharing options...
ellison Posted May 8, 2011 Author ID:426548 Share Posted May 8, 2011 And the other Log's, please post us all needed Logs here, to help you out of your mess !MAMIm not sure what other logs you need?.The two dds logs were posted.ellison Link to post Share on other sites More sharing options...
MAM Posted May 8, 2011 ID:426550 Share Posted May 8, 2011 Hello, you read this http://forums.malwarebytes.org/index.php?showtopic=9573 exactly ?!Please do that, what there is.MAM Link to post Share on other sites More sharing options...
ellison Posted May 8, 2011 Author ID:426555 Share Posted May 8, 2011 Hello, you read this http://forums.malwarebytes.org/index.php?showtopic=9573 exactly ?!Please do that, what there is.MAMJust run defrogger and then gmer.Gmer now doesnt show any any thing and the logs are blank.This is in contrast with the gmer log shown in my first post (link at wilders) which showed 2 rootkits/malware.I guess using defrogger has affected the gmer results?ellison Link to post Share on other sites More sharing options...
Staff screen317 Posted May 11, 2011 Staff ID:427743 Share Posted May 11, 2011 Hi ellison and welcome to Malwarebytes.To ensure you're getting the best help possible, please do not follow the recommendations of anyone not in these groups:http://forums.malwarebytes.org/index.php?showtopic=12264With that said, please update MBAM, run a Quick Scan, and post its log.Next, download DDS by sUBs and save it to your Desktop.Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply. Link to post Share on other sites More sharing options...
ellison Posted May 11, 2011 Author ID:427840 Share Posted May 11, 2011 Hi ellison and welcome to Malwarebytes.To ensure you're getting the best help possible, please do not follow the recommendations of anyone not in these groups:http://forums.malwarebytes.org/index.php?showtopic=12264With that said, please update MBAM, run a Quick Scan, and post its log.Next, download DDS by sUBs and save it to your Desktop.Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply.Hi ..My first post was incorrect.When my g/f installed sanity check on her w7 64bit laptop ,she didn't reboot before scanning ,and that gave a "clean" result.However when she installed it again and rebooted ,she was also getting the warnings about non existent files. I have concluded that sanitycheck is not a reliable tool on my pc or possibly on 64 bit os.If possible maybe someone else with windows 7 64 bit could run it (remember to reboot) and see if they get similar results?tiaellison Link to post Share on other sites More sharing options...
Staff screen317 Posted May 12, 2011 Staff ID:428344 Share Posted May 12, 2011 I've never even heard of that software before. I would uninstall it now.What issues are you currently experiencing? Link to post Share on other sites More sharing options...
ellison Posted May 12, 2011 Author ID:428388 Share Posted May 12, 2011 I've never even heard of that software before. I would uninstall it now.What issues are you currently experiencing?sanitycheck is reputable software http://www.resplendence.com/sanityThe issue that has me stumped is the presence of a system folder in registry hive HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion ( see screenshot at the wilders thread http://www.wilderssecurity.com/showthread.php?t=298806post 15.)Ive tried removing that system folder from safe mode with explorer shut down ,and i get the same message saying the folder cant be found.Its like the folder doesnt exist and windows is telling me that it isnt there ,and yet i can see it when i open registry.ellison Link to post Share on other sites More sharing options...
Staff screen317 Posted May 15, 2011 Staff ID:429350 Share Posted May 15, 2011 Hi,Unfortunately Wilders is down currently so I can't see the screenshot. Could you post it directly here? Link to post Share on other sites More sharing options...
ellison Posted May 15, 2011 Author ID:429361 Share Posted May 15, 2011 Hi,Unfortunately Wilders is down currently so I can't see the screenshot. Could you post it directly here?Here is the pic.I can add a string to the folder and modify it ,which then allows me to delete it,however upon reboot it appears again.I dont have the folder on my dektop pc and others running w764bit have said they dont have the folder either.Ive also posted at macecraft forums in the hope a registry expert may be able to shed some light.Again i do not believe i am infected as too many tools have shown that there is no malware ,but i cant explain the presence of the folder.Note also that although the system folder is highlighted ,it does nt show in the address bar above it.The address bar shows the previous folder.ellison Link to post Share on other sites More sharing options...
Staff screen317 Posted May 18, 2011 Staff ID:430696 Share Posted May 18, 2011 I think you are confusing terminology here. There are no "folders" in the Registry. There are only Hives, Keys, and Values.Even so, a blank Registry Key can't do anything. You aren't infected. Link to post Share on other sites More sharing options...
Recommended Posts