Results 1 to 10 of 14

Thread: Windows 7 Doing Strange Things

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Member
    Join Date
    Oct 2009
    Posts
    87

    Default Windows 7 Doing Strange Things

    Hi,

    Over the past couple of days my computer has started doing really strange things. I build websites for a living so I am ‘really’ careful what sites I go on and what I download.

    Here are some of the issues:

    - File explorer is making the error noise when I open it and doing strange things

    - Files are opening with one click

    - When I click to maximize a minimized aero peek window from the taskbar the windows open then disappear

    - The mouse is not highlighting and copying things correctly

    - Explorer is doing lots of weird things - the error noise is sounding when I use some tools, when I open a new tab it closes explorer down, two tabs open at once and more

    - When I open control panel it changes the page in explorer

    I have recently been listening to music on Deezer.com while I work and I noticed that the music and ads wouldn’t work correctly the other day. This is the only place I could have possibly got a virus from.

    Please find the logs attached. The logs were too big according to the forum rules so I had to split some of them over two files

    Thanks.
    Attached Files Attached Files

  2. #2
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default



    Lets run a few scans and see what they turn up, if malware is not the reason causing this I can refer you to a windows forum that can help.

    If you can I would prefer if possible to copy and paste the logs we ask for into this thread in lieu of attaching them




    -AdwCleaner-by Xplode


    Click on this link to download : ADWCleaner TO YOUR DESKTOP
    Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop.
    Use my link only, do not do a search for AdwCleaner as there is a bogus copy going around by scammers




    Do not click on any links in the top Advertisment.






    • Close all open programs and internet browsers.
    • Double click on AdwCleaner.exe to run the tool.
    • Click on Scan.
    • After the scan is complete click on "Clean"
    • Confirm each time with Ok.
    • Your computer will be rebooted automatically. A text file will open after the restart.
    • Please post the content of that logfile with your next reply.
    • You can find the logfile at C:\AdwCleaner[S1].txt as well.






    ===============================================================================






    Please download Junkware Removal Tool TO YOUR DESKTOP

    • Download the one from Bleeping Computer
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.








    ===============================================================================


    Download Malwarebytes' Anti-Malware TO YOUR DESKTOP



    • Windows XP : Double click on the icon to run it.
    • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"








    • On the Dashboard click on Update Now
    • Go to the Setting Tab
    • Under Setting go to Detection and Protection
    • Under PUP and PUM make sure both are set to show Treat Detections as Malware
    • Go to Advanced setting and make sure Automatically Quarantine Detected Items is checked
    • Then on the Dashboard click on Scan
    • Make sure to select THREAT SCAN
    • Then click on Scan
    • When the scan is finished and the log pops up...select Copy to Clipboard
    • Please paste the log back into this thread for review
    • Exit Malwarebytes
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  3. #3
    Member
    Join Date
    Oct 2009
    Posts
    87

    Default Windows 7 Doing Strange Things

    Hi Ken545,

    I haven't used the forum on my own behalf for quite a few years, I have used the service recently to
    help my parents with their PC's though. We are all very grateful for your time. Thank you, for your help.

    Please find the logs attached.

    The computer continued missbehaving after running the JRT scan. Firefox opened up some new tabs to Photobucket on it's own. When I clicked to delete the Firefox history it opened up some more tabs to Photobucket; then, I noticed the strangest thing, when I hovered over the Photobucket tab I noticed that 'your username' was in the link. How weird is that? Not a coincidence I think!

    So, I took a screenshot which was difficult as MS Paint kept shutting down and would not select and copy; but, I got there in the end - please see attached screenshot. The taskbar is also maximizing the wrong programs when I click an icon. Files are still opening on a single click too and control panel windows are maximising when I just click the white background.

    I pressume there is something more serious than junkware on here. I'm devastated because I absolutely
    love this PC. I use it for everything including my job; the performance is great and I have never had any
    trouble with it. I am always ultra careful what sites I go on, and if I am ever unsure about a download
    I don't use this computer, I will use another.

    I was hoping that Malwarebytes would find something amiss. A Malwarebytes log did not open up after completion but I noticed the 'save results' link so I copied the information from there.

    Thanks again


    ###################


    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 05/09/2015
    Scan Time: 10:58 AM
    Logfile:
    Administrator: Yes

    Version: 2.1.8.1057
    Malware Database: v2015.09.05.03
    Rootkit Database: v2015.08.16.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Self-protection: Disabled

    OS: Windows 7 Service Pack 1
    CPU: x64
    File System: NTFS
    User: User

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 563991
    Time Elapsed: 57 min, 42 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Enabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 0
    (No malicious items detected)

    Registry Values: 0
    (No malicious items detected)

    Registry Data: 0
    (No malicious items detected)

    Folders: 0
    (No malicious items detected)

    Files: 0
    (No malicious items detected)

    Physical Sectors: 0
    (No malicious items detected)


    (end)
    Attached Images Attached Images
    Attached Files Attached Files

  4. #4
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    Good Morning,

    I host all my images at PhotoBucket in the instructions that I post for the tools we use to clean up computers so that would explain why my username is tied to it.

    The scans are really not coming up with much, run this quick fix to clean out all your temp files using FRST

    ~Open notepad , Go to Start --> All Programs --> Accessories --> Notepad.
    Please copy the entire contents Inside of the code box below beginning with START and ending with END
    (To do this highlight the contents of the box, right click on it and select copy. Right-click in the open notepad and select Paste).
    Name the file Fixlist, Save it to your desktop where you have FRST/FRST64 or the fix wont work, . Then open up FRST/FRST64 and click on FIX (Not Scan) It won't take long, after your computer reboots you will find a FIXLOG.TXT on your desktop, post it please


    Code:
    Start
    CloseProcesses:
    CreateRestorePoint: 
    Hosts:
    CMD: ipconfig /flushdns
    EmptyTemp:
    End

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system



    Then lets run the Rootkit scanner with Malwarebytes to make sure a Rootkit type of infection is not present

    Please download Malwarebytes Anti-Rootkit from Here

    • Unzip the contents to a folder in a convenient location.
    • Open the folder where the contents were unzipped and run mbar.exe
    • Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
    • Click on the Cleanup button to remove any threats and reboot if prompted to do so.
    • Wait while the system shuts down and the cleanup process is performed.
    • Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
    • When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  5. #5
    Member
    Join Date
    Oct 2009
    Posts
    87

    Default Windows 7 Doing Strange Things

    Hi Ken545,

    There was only one log file - system-log.txt. Please find it attached. I didn't run a second scan as nothing was found.

    This is starting to worry me as nothing is being found but the PC is no better.

    The PC was purchased with Vista on, I then bought a Windows 7 upgrade disk from Dell, and now I have a copy of Windows 10 waiting. So, I don't have an original factory installation disk for it if I need to reinstall Windows from scratch.

    I know I have a failed Array on one of the hard drives. The PC works fine though, except the virus. I wanted to try to get rid of the virus before I tried rebuilding the Array. Apparently, I might not a new hard drive because all the hard drive tests I have run with Seagates own integrity software shows the drive health as fine.

    Thank you, for your help.
    Attached Files Attached Files

  6. #6
    Member
    Join Date
    Oct 2009
    Posts
    87

    Default

    Sorry, I forgot fixlog.txt
    Attached Files Attached Files

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •