Solved Firefox won't load/AVG reports Win32/Heur.dropper

[theblackstreak]

Got really bad problems now!!!! First I noticed Quickbooks would not open. So I rebooted, then the system wouldn't boot properly. Finally got in but Quickbooks still wouldn't open. Tried a few recommended steps to repair through the suggestions of users on the intuit forums. Still won't work. Aside from that, the system repair console can't repair whatever problems Windows is having. I can only boot up in Safe Mode. I am writing this from my laptop. Without my desktop, i am doomed. Currently when I restart, I only get a blank screen.

More things I've noticed.

1. Once I restarted, windows apparently provided updates, then the system got stuck installing the updates.
2. Also I tried to uninstall Quickbooks in safe mode but it wouldn't allow me.

By the way I did the last set of steps you asked of me.

 

[Bobbye]

"Yes Firefox is running fine"> 4 weeks ago.

No indication of Win32/Heur in past month.

There has been no mention of Quick Books previously. This appears to be a new problem.. Since you can boot into Safe Mode, please run Mbam, Eset scan and Combofix again.Be sure to update each before the scan.

 

[theblackstreak]

Update, I was able to get into safe mode, did a system restore to 10/7/10. Was able to uninstall Quickbooks. Before I do anything else, I need to reinstall Quickbooks. What program can i run to check that Windows is functioning correctly?

 

[Bobbye]

What program can i run to check that Windows is functioning correctly?

If you can only boot into Safe Mode and can't boot into Normal Mode, Windows is not functioning properly. If the System Restore back to 10/7 got the system back to booting into Normal Mode, that's progress.

My suggestion was this:
"Since you can boot into Safe Mode, please run Mbam, Eset scan and Combofix again.Be sure to update each before the scan."

We've been working for a month. The problems in the subject were resolved. You restored back to 10/7, but your last log date is 10/3. That means I don't know what is running now.

The cleaning wasn't completed and the tools weren't removed. You chose a date to restore back to> I did not have you do the restore or attempt a 'repair'. You kind of went off on your own and came up with a new problem.

FYI: in the logs I saw earlier, you have both MozyHome and QuickBooks update on startup:

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MOZYHO~1.LNK - C:\Program Files (x86)\MozyHome\mozystat.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\QUICKB~1.LNK - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe

If you're running a backup every time you start, wouldn't it have been possible to recover QuickBooks from that?

A tip for later to keep in mind: you can startup the system> hover the mouse over Mozilla Firefox in Programs> choose Open Firefox in Safe Mode.

 

[theblackstreak]

Let me update you before I do anything else.

I was able to uninstall and reinstall Quickbooks, And for the last two days my system is running smoothly. Should I re-run the utilities you mentioned in the last post?

Also, I will be out of town for a while with no access to this computer, so I an going to try very hard to get any problems rectified before I leave.

 

[Bobbye]

Since you can boot into Safe Mode, please run Mbam, Eset scan and Combofix again.Be sure to update each before the scan.

QuickBooks is an entirely separate issue. I went back over the logs and noticed this in the OTM log:

User: QBDataServiceUser20
->Temp folder emptied: 771072 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 41620 bytes

There are 2 named accounts- Chris and QBDataServiceUser20. I don't remember every seeing any logs with a user of this name. It might possibly have something to do with the QB problem you're having.

But that's separate. I'll review the rescans, see if there is anything to remove, then have you remove the cleaning tools. Then I will close this thread. If any problem remains, you can start a new thread when you return, giving the current problem. If it's malware related, post in this forum. If it is not, post in another forum in TechSpot that would be more appropriate.

 

[theblackstreak]

Ok. Thank you Bobbye.

 

[Bobbye]

You're welcome. See you in a while.