also @ TechSpot: Asus' new lineup of Z87 Haswell motherboards revealed

Yet another Patched.64 (and other) issues

Discussion in 'Virus and Malware Removal' started by F1forever, Nov 26, 2012.

  1. F1forever Newcomer, in training Posts: 31

    Combo Fix has been sitting at "Completed Stage_48" for nearly 2 hours. Normal?
  2. Jay Pfoutz Malware Helper Posts: 4,286   +49

    That can be normal, not usual or unusual. Did it complete?
  3. F1forever Newcomer, in training Posts: 31

    Nope. It's been 19 hours and still working, at least I think it is. HD is working on something. Completed stage 50 now.
  4. F1forever Newcomer, in training Posts: 31

    Forgot to mention had a power drop during the first scan and had to restart it.
  5. F1forever Newcomer, in training Posts: 31

    After 22 hours Combo Fix is finally done. Had to attach the log as it is nearly 70K.

    Attached Files:

  6. Jay Pfoutz Malware Helper Posts: 4,286   +49

    Wow, sorry that happened!

    ESET Online Scan

    Please run a free online scan with the ESET Online Scanner
    • Tick the box next to YES, I accept the Terms of Use
    • Click Start
    • When asked, allow the ActiveX control to install, or it will ask to download an installer. Please do so an install it.
    • Click Start or wait for the scanner to load.
    • Make sure that the options Remove found threats and the option Scan unwanted applications are checked.
    • Click Scan (This scan can take several hours, so please be patient)
    • Once the scan is completed, there are a couple of things to keep in mind:
    • 1. If NO threats were found, allow the scanner to Uninstall on close and then close the Window.
    • 2. If threats WERE detected, click on List of Threats Found, Export to Text File...save it as ESET-Scan-Log.txt. Click the back button/link, put a checkmark to Uninstall Application on Close and then close the window.
    • Open the logfile from wherever you saved it
    • Copy and paste the contents in your next reply.


    It all appears to be good, so we will finish up to make sure your computer is protected from malware in the future.

    Clean up System Restore

    Now, to get you off to a clean start, we will be creating a new Restore Point, then clearing the old ones to make sure you do not get reinfected, in case you need to "restore back."

    To manually create a new Restore Point
    • Go to Control Panel and select System and Maintenance
    • Select System
    • On the left select Advance System Settings and accept the warning if you get one
    • Select System Protection Tab
    • Select Create at the bottom
    • Type in a name I.e. Clean
    • Select Create
    Now we can purge the infected ones
    • Go back to the System and Maintenance page
    • Select Performance Information and Tools
    • On the left select Open Disk Cleanup
    • Select Files from all users and accept the warning if you get one
    • In the drop down box select your main drive I.e. C
    • For a few moments the system will make some calculations:
      [IMG]
    • Select the More Options tab
      [IMG]
    • In the System Restore and Shadow Backups select Clean up
      [IMG]
    • Select Delete on the pop up
    • Select OK
    • Select Delete
    Run OTC to remove our tools

    To remove all of the tools we used and the files and folders they created, please do the following:
    Please download OTC.exe by OldTimer:
    • Save it to your Desktop.
    • Double click OTC.exe.
    • Click the CleanUp! button.
    • If you are prompted to Reboot during the cleanup, select Yes.
    • The tool will delete itself once it finishes.
    Note:If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.

    Purge old temporary files

    NOTE: If you already have this installed, you don't have to reinstall it.

    Please download CCleaner Slim and save it to your Desktop - Alternate download link

    When the file has been saved, go to your Desktop and double-click on ccsetupxxx_slim.exe
    Follow the prompts to install the program.

    • Double-click the CCleaner shortcut on the desktop to start the program.
    • A prompt will ask you if you want CCleaner to do a check to see what cookies it needs to keep. Allow that operation.
    • On the Cleaner tab, click on Run Cleaner on the bottom-right to run the program.
    • Important: Make sure that ALL browser windows are closed before selecting Run Cleaner, or it will ask if you want the program to close them for you (when you do this, all unsaved data may be lost in the browser).

    Caution: Only use the Registry feature if you are very familiar with the registry.
    Always back up your registry before making any changes. Exit CCleaner after it has completed it's process.

    Security Check

    Please download Security Check by screen317 from SpywareInfoforum.org or Changelog.fr.
    • Save it to your Desktop.
    • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
    • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
     
  7. F1forever Newcomer, in training Posts: 31

    For some reason that computer has lost its ability to find the network or any internet access so I will have to figure that out first. Was working fine last night.
  8. F1forever Newcomer, in training Posts: 31

    My wife told me when she shut down an automatic update. I think this might be the issue. If I remember Combo Fix created a restore point before running. Can I use this?
  9. F1forever Newcomer, in training Posts: 31

    It appears that a new version of Visual c++ (2010 x86 redistributable -10.0)was installed. Could this be my issue or do you think was it an effect of the virus removal?
  10. Jay Pfoutz Malware Helper Posts: 4,286   +49

    I don't think anything like that has to do with it...let's try the following:

    Press start, then type in cmd - then hit Enter.

    In the command prompt window, press in the following code exactly:


    netsh winsock reset catalog

    Then, exit out.
    ==

    Do you have Internet after performing the above process?
  11. F1forever Newcomer, in training Posts: 31

    No Joy. When I troubleshoot the connection I get the message "Windows could not automatically detect this network's Proxy settings". Made sure all Proxy settings are off. Have tried every type of reset that I have read about. Manually configured TCP/IP using the settings from my working computer and it at least recognized a network but still no internet. A bit stumped!
  12. Jay Pfoutz Malware Helper Posts: 4,286   +49

    Lets check some settings on your system:
    1. Enter your Control Panel and double-click on Network Connections
    2. Then right click on your Default Connection
      • Usually Local Area Connection for Cable and DSL, or AOL Connection.
    3. Left click on Properties
    4. Double-Click on the Internet
      Protocol (TCP/IP
      ) item
    5. Select the radio dial that says Obtain DNS Servers Automatically
    6. Press OK twice to get out of the properties screen
    7. Restart the computer
    Go to Start->Run->Type CMD and click Ok. The MSDOS Window will be displayed. At the command prompt, type the following and press Enter after each line:

    ipconfig /flushdns (The space between g and / is needed)
    regsvr32 netshell.dll
    regsvr32 netcfgx.dll
    regsvr32 netman.dll

    Exit

    Restart the computer.
  13. F1forever Newcomer, in training Posts: 31

    All commands completed successfully. Still no network access. If it matters this is Windows 7.
  14. Jay Pfoutz Malware Helper Posts: 4,286   +49

  15. F1forever Newcomer, in training Posts: 31

    Still NG. What about sfc /scannow or restore? Need to get internet SOON!
  16. Jay Pfoutz Malware Helper Posts: 4,286   +49

    Go for it! :)
  17. F1forever Newcomer, in training Posts: 31

    Success! The restore point Combo Fix created worked, so I'm back to the point just before it ran. Will try the final steps (ESET and onward) tomorrow or Tues. and let you know the results. Thanks.
  18. Jay Pfoutz Malware Helper Posts: 4,286   +49

    Okay. Will wait for that. :)
  19. Jay Pfoutz Malware Helper Posts: 4,286   +49

    Still here. :)
  20. F1forever Newcomer, in training Posts: 31

    Read my mind!!! I was just about to let you know ESET scan has been running for about 25hrs. and has been working @ 99% of step 3 for about 12 of them. Still seems to be HD activity.