TechSpot

System Check virus

Resolved
By carola89
Jan 15, 2012
Topic Status:
Not open for further replies.
  1. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    You should never do a System Restore during cleaning unless you are instructed to. Doing restore invalidates all of the previous information.

    Please use the Edit feature to add a sentence or a few words. And you don't have to out each log in a separate post. I got an email for each of these replies.

    You now have processes for all these antivirus programs:
    ONE antivirus!
    ====================================
    It appears that Combofix did run before because it quarantined some files.

    The problem you're having with Startup is because of this:
    When you did the System Restore, some files were removed. You did a good job of undoing what we had already done!

    You seem to have a history of restores:
    RP150: 12/24/2011 6:02:32 PM - Restore Operation
    RP151: 12/25/2011 3:30:52 PM - avast! Internet Security Setup> why did you add this on the same day you put Norton on the system??!
    RP154: 1/14/2012 8:11:03 PM - Restore Operation

    System restore is a valuable tool to have. However, doing a restore is not always a right thing to do.
    .
  2. carola89

    carola89 TS Rookie Topic Starter Posts: 22

    i'm sorry, windows wouldn't start and the only option it gave me was to do the restore to fix it.
    i just run malwarebytes and this is the log:
    Malwarebytes Anti-Malware 1.60.0.1800
    www.malwarebytes.org

    Database version: v2012.01.22.01

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 8.0.7601.17514
    carola :: CAROLA-HP [administrator]

    1/21/2012 6:59:40 PM
    mbam-log-2012-01-21 (18-59-40).txt

    Scan type: Full scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 390180
    Time elapsed: 1 hour(s), 41 minute(s), 47 second(s)

    Memory Processes Detected: 1
    C:\Windows\svchost.exe (Trojan.Agent) -> 2152 -> Delete on reboot.

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 1
    C:\Windows\svchost.exe (Trojan.Agent) -> Delete on reboot.

    (end)

    how can i fix my startup now?
  3. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    And you restored back to the malware!!

    If this doesn't work, you will have to search your system for each program, do a right click> Send to> Desktop to create a shortcut.
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.