Njustice replied to the forum and offered this: Please download EXE lnk and regfile Fix for Windows XP and save it to your desktop I run malware bytes regularly and after doing an update and running again It found a pum highjack. T he following is Malware byte log: Malwarebytes Anti-Malware 1.
I hope I have made this post correctly and I apologize in advance if it's not I do regularly run CCleaner and do the registry also. Thank You, Doug Hendon dds. Link to post Share on other sites More sharing options Replies 69 Created 9 yr Last Reply 9 yr. Top Posters In This Topic 25 Maurice Naggar Posted December 13, Hello DougH.
Do NOT run any tools or fixes on your own. Only follow my guidance. And make sure you do not use nor run any "registry optimizer" or "maximizer" or "cleaner". Do this next and let me know, and await my next reply. Link 2 Link 3 Link 4 Double-click on the Rkill desktop icon to run the tool. A black DOS box will briefly flash and then disappear.
This is normal and indicates the tool ran successfully. If not, delete the file, then download and use the one provided in Link 2. If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs. If the tool does not run from any of the links provided, please let me know. Ok, I didn't have any problems running the rkill. Got it of the first link.
Here is the log. Rkill 2. BAT associations in the Windows Registry. I don't know if java has squat to do with shockwave so for me it's a shot in the dark. I will monitor this thread to see if you have any more instructions.
Hold off on doing anything else on your own. I'd like for you to do the following. Install ERUNT by following the prompts use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later 3.
Start ERUNT either by double clicking on the desktop icon or choosing to start the program at the end of the setup 4. Make sure that at least the first two check boxes are ticked 6. Press OK 7. Press YES to create the folder. Step 2 Set Windows to show all files and all folders. Next, un-check Hide extensions for known file types. Next un-check Hide protected operating system files. Double click on RSIT. Click Continue at the disclaimer screen. Once it has finished, two logs will open.
Please post the contents of both log. A Notepad document should open automatically called checkup. We will need this log, too, so remember where you've saved it!
Step 5 Close all open browsers at this point. Allow the download and install of qsax. If prompted, reply yes to allow it to run. Press the Allow button and follow prompts. Press the "Start Scan" once more. You'll see the EULA in a pop-up window. The site boasts a second scan. Do have patience as it likely will take longer. It may seem to stall at moments, but have patience; it will move on.
You'll see a progress bar at top right of window. Hopefully you will see a No infections found in the bar-winddow. Press the View Log button. The log report will show in your text editor. Save the log. Then paste contents into your next reply. Please disconnect any USB or external drives from the computer before you run this scan! For Windows XP, double-click to start. Wait until Prescan has finished Click on Scan. Step 7 RE-Enable your antivirus program. Use separate replies as needed if logs do not fit into one reply box.
DougH Posted December 14, Posted December 14, Maurice Naggar Posted December 14, I do have my window defender off right now. Here are the logs from Random highjacker: info. Corruption may occur. Reference error message: The operation completed successfully. Reference error message: The referenced assembly is not installed on your system.
Ignore this post I am comparing my clock to yours timestamp. It is off by about 4 minutes. I mention this because I noticed the log mentions: Computer Name: CURTIS Event Code: 36 Message: The time service has not been able to synchronize the system time for seconds because none of the time providers has been able to provide a usable time stamp.
The system clock is unsynchronized I have had some time issues in the past. Other than that, do not focus too much on the system time. Get for me the reports by doing steps 4 and 6. What antivirus program is installed on this box??
Download Win32kDiag Win32kDiag. Results of screen's Security Check version 0. Windows Firewall Enabled! DougH Posted December 15, Posted December 15, Maurice Naggar Posted December 15, Logoff and Restart the system fresh. You may notice the desktop icons disappear. Do NOT panic, as that is expected behavior. If this is on a notebook system, make sure first the notebook is connected to wall-power AC power Download Combofix from any of the links below.
They may otherwise interfere with our tools Double click on Combo-Fix. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message: Click on Yes, to continue scanning for malware.
Notes: [1] IF after Combofix reboot you get the message Illegal operation attempted on registry key that has been marked for deletion. Contents of the 'Scheduled Tasks' folder. Completion time: - machine was rebooted ComboFix-quarantined-files. Pre-Run: 3,,, bytes free Post-Run: 3,,, bytes free.
Maurice Naggar Posted December 16, Posted December 16, First, make sure you have rebooted the system since after Combofix finished. On the DDS tool: it does not seem normal for it to keep trying to run.
For the time being, you may delete DDS. Save and close any work documents, close any apps that you started. If prompted for a Restart, do that. When done, click the Scanner tab. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. Tell me, How is the system? Re-enable your antivirus program. DougH Posted December 16, Malwarebytes Anti-Malware 1. DougH Posted December 17, Posted December 17, Maurice Naggar Posted December 17, Only go to this forum and the sites I guide you to for tools.
We will need to run a few more tools to see if there are other malware s onboard. Please follow my guidance until I give you the all clear. If an infected file is detected, the default action will be Cure , click on Continue. If a suspicious file is detected, the default action will be Skip , click on Continue. If you get the warning about a file UnsignedFile. Generic or LockedFile. Generic please choose Skip and click on Continue It may ask you to reboot the computer to complete the process.
Click on Reboot Now. If no reboot is require, click on Report. A log file should appear. Maurice Naggar Posted December 18, Posted December 18, Click the icon for Vista, or Windows 7 Right click the icon and Run as Administrator to start the program. Now click Run Scan at Top left and let the program run uninterrupted. It will take about 4 minutes. It will produce two logs for you, one will pop up called OTL.
Exit Notepad. Remember where you've saved these 2 files as we will need both of them shortly! Exit OTL by clicking the X at top right.
Download Security Check by screen and save it to your Desktop: here Run Security Check Follow the onscreen instructions inside of the command window. DougH Posted December 18, EXE Logitech Inc. InternetShortcut [open] -- rundll It has done this 1 time s. It has stopped monitoring the volume. This topic is now closed to further replies. Go to topic listing. Recently Browsing 0 members No registered users viewing this page.
Back to top. Sign In Sign Up. Important Information This site uses cookies - We have placed cookies on your device to help make this website better. I accept. Thanks for your feedback. My computer was infected by a virus that got past AVG 9. I removed the virus using Malwarebytes but after removal Windows doesn't recognize exe files anymore.
I have tried to restore to a point prior to infection but I had recently cleaned up all but one restore point and virus was present after restore. I also checked Registry and verified all entries associated with exe files and found no errors Any suggestions that do not involve wiping the entire harddrive?
It would be second time in one year. This thread is locked. You can follow the question or vote as helpful, but you cannot reply to this thread. I have the same question
0コメント