Search:

I think that not having enough RAM could be part of the issues. I would also make sure that the computer meets or exceeds Flash Player's processor and graphics memory requirements for a better...

Let's run System File Checker to see if the infection corrupted any of Window's system files. :)

Please press Windows key + R.
Type sfc /scannow and press Enter.
Let the system file checker...

:thanks:

Could you run the following fix once more:

This time, please be sure to press the Run Fix button and not the Run Scan button.:bigthumb:

Please run OTL.exe.

Copy/paste the...

Do you experience the sync issues on all video quality settings? :)

Since the Flash Player for Firefox, Internet Explorer and Chrome are quite different, you may find that one browser provides...

Thanks for letting me know.:police:

Please run OTL.exe.

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL


:OTL
O3...

Nice work :)

let's do some sweeps in case there are any leftovers.:bigthumb:

CFSCRIPT
---------------

Please open Notepad and copy/paste the text present inside the code box into the...

Thanks for the log:D:

Please go to VirusTotal.

Click Choose File and browse to the file listed below in bold and click Scan it!.

C:\Qoobox\Quarantine\C\WINDOWS\SysWow64\muzapp.exe.vir
...

:bigthumb:

COMBOFIX
---------------
Please download ComboFix from one of the following locations:

Location #1
Location #2
***IMPORTANT!!! Save ComboFix.exe to your Desktop.
Disable...

Thanks for providing the logs.:thanks:

ADWCLEANER
----------------------------
Download AdwCleaner from here and save it to your desktop.

Run AdwCleaner and select Delete.
Once done it...

Please post the contents of attach.txt too.:bigthumb:

Next

Download RogueKiller and save it on your Desktop.

Quit all programs.
Start RogueKiller.exe. For Vista or Windows 7,...

Hi, and welcome to our malware removal forum!

My name is Richard and I'll be happy to help you with your computer problems.

Please be advised that I am currently in training, so my responses...

No problem:) Thanks for letting me know.:bigthumb:



Regards,

Richard:greeting:

The items found by ESET seem to be Potentially unwanted applications (not necessarily intended to be malicious). They do not need to be removed.:bigthumb:

The audio out of sync problems could be...

CHKDSK has found bad sectors on your drive, but it's not much of a concern right now (typically a hard drive has 0 KB in bad sectors). CHKDSK marked them out so that they are unusable in the...

The files we checked seem to be OK.:police:

Please run OTL.exe.

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

...

Nice work:2thumb:

The ESET log looks fine. :)

I noticed errors that indicate problems with your hard drive.:blink:

I recommend that you backup any vital files from it as a...

Please go to VirusTotal.

Click Choose File and browse to the file listed below in bold and click Scan it!.

D:\WINNT\npptools.dll


There might be a short wait.
Select Reanalyse file...

Nice work:police:

MALWAREBYTES' ANTI-MALWARE
-------------------------------------------
I see that you have Malwarebytes' Anti-Malware installed.

Open Malwarebytes' Anti-Malware.
...

No problem :)

A copy of the OTL fix log can be found by navigating to C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, where mmddyyyy_hhmmss is the date of the tool run.:bigthumb:

In your next reply,...

:2thumb:

Please run OTL.exe.

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL


:OTL
O17 -...

Thanks for providing the log.:bigthumb:

How is the PC running now?:)

Please move ComboFix.exe to the Desktop. It is currently in the location below:
c:\documents and settings\Home\My...

Thanks for letting me know that you will be out of town until November 4.:)

I understand your frustration, but please keep in mind that my responses are reviewed for accuracy by one of our...

Thanks for the information and logs.:D:

COMBOFIX
---------------
Please download ComboFix from one of the following locations:

Location #1
Location #2 Disable your AntiVirus and...

Could you please confirm that your popup blocker is turned off?:bigthumb:

Then, try to run the scan once more by right clicking on your browser icon and selecting Run as Administrator as...

Thanks for the information:bigthumb:

Please post the old Malwarebytes Anti-Malware and Avira logs (if possible) from the previous scans which detected around 193-200 items. No worries if you...

Thanks for providing the logs.:D:

Please right click on your browser icon and select Run as Administrator in order to run this scan.
Do not use this instance of your browser for anything besides...

Nice work:2thumb:


This seems to be an Internet Explorer issue. Please refresh the page, then hit the back browser button to return to your search results.:D:

MALWAREBYTES' ANTI-MALWARE ...

ERUNT AutoBackup could have encountered a problem when automatically backing up the registry upon reboot. :)


Could you provide a description of what is happening?:police:

Next

Please...

Do these DNS server IP addresses look familiar? :)

Next

Please post the Malwarebytes Anti-Malware and Avira logs (if possible).:cool:

The Malwarebytes Anti-Malware log can be found by:
...

Thanks for providing the logs.:bigthumb:

Please run OTL.exe.

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL


:OTL...

Thanks for your patience.:)

ADWCLEANER
----------------------------
Download AdwCleaner from here and save it to your Desktop.

Double click on AdwCleaner.exe to run the tool.
Click on...

Thank you for your patience.:)

Download RogueKiller and save it on your Desktop.

Quit all programs.
Start RogueKiller.exe. For Vista or Windows 7, right-click on the program, select Run as...

Please know that I have not forgotten about you.:)

I am waiting for one of our experts to review my response before I post it. This is only to ensure you are receiving accurate instructions. It...

No worries:bigthumb:

I am waiting for one of our experts to approve my response before I post it. This is only to ensure you are receiving accurate instructions. It may cause a delay in my...

Hi, and welcome to our malware removal forum!

My name is Richard and I'll be happy to help you with your computer problems.

Please be advised that I am currently in training, so my responses...

Hi, and welcome to our malware removal forum!

My name is Richard and I'll be happy to help you with your computer problems.

Please be advised that I am currently in training, so my responses...

You're very welcome!:D:

I think Microsoft Security Essentials is a great choice for protection.:2thumb:



Regards,

Richard:greeting:

If you are not having any other malware problems, it is time to do our final steps:

I'm pleased to let you know that the infections seem to have been taken care of!:2thumb:

Thank you for your...

The ESET scan looks nice. This file will be removed when we remove our tools. :)

We will be doing some updating next.:D:

Please download Security Check.
Save it to your Desktop.
Double...

Nice work:2thumb:

MALWAREBYTES' ANTI-MALWARE
-------------------------------------------
Download Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php to your Desktop.

...

No worries:D:


These items were unhidden by OTL.:)

The folders that have locks are junction points. We will re-hide the desktop.ini files and junction points later.:bigthumb:

You should...

Please run OTL.exe.

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL


:OTL
IE - HKCU\..\SearchScopes,DefaultScope =...

I think those could be legitimate updates.:bigthumb:

Run OTL.exe. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the...

Do any start menu/Desktop items still need to be restored?:)

can you access everything on the computer now?

Please download OTL by OldTimer.

Save it to your Desktop.
Please click OTL and...

Nice job:bigthumb:

Please do the following:

Click Start and in the Search programs and files box type Notepad.exe then hit Enter.
An empty Notepad file will open.
Copy and paste the...

Let`s try entering System Recovery Options by using your Windows 7 System Repair Disk. :):bigthumb:

Plug the USB drive with Listparts into the infected machine.

To enter System Recovery...

We need to create a Windows 7 System Repair Disk. Note that this disk can only be used to access the Recovery Environment, not to reinstall Windows 7.

Press the Windows Key + R, then type...

Have you tried entering System Recovery Options by using your Windows 7 DVD?:)

Plug the USB drive with Listparts into the infected machine.

To enter System Recovery Options by using your...

You have a hidden malware partition that we need to deactivate and remove.
We'll need a flashdrive and if possible your Windows 7 disk.

Download ListParts64 and save it to the flashdrive.

With...

Download RogueKiller and save it on your Desktop.

Quit all programs.
Start RogueKiller.exe. For Vista or Windows 7, right-click on the program, select Run as Administrator to start, then when...