system
August 30, 2009, 8:53am
1
Hi, I ran a scan the other day and got rid of several viruses. However, I can’t figure out how to repair the damage they did to my computer.
Lots of stuff is malfunctioning, including Avast. There is a little red circle with a bar over the toolbar logo. The On-Access Scanner isn’t running. VRDB won’t work.
I also can’t do a system restore because that isn’t working. I can barely get Firefox to launch…it keeps crashing on me. My virus scans are SUPER slow. CheckDisk isn’t working right. On and on and on.
I need some advice on how to get things working right again. I can’t even reboot without tons of tries before it works.
Pondus
August 30, 2009, 10:06am
2
Are you sure you are clean ???
Tryhttp://malwarebytes.org/ and press “remove slected” after scan
system
August 30, 2009, 10:28am
3
No, I’m not sure. :-\
MBAM is what I used initially. After I restarted to finish the removal is when all my problems began.
Pondus
August 30, 2009, 10:28am
4
Also download an run HijackThis and post the logg her, then someone who can read these loggs will help youhttp://filehippo.com/download_hijackthis/
Pondus
August 30, 2009, 10:30am
5
Do you also have the name of the Virus ?
Pondus
August 30, 2009, 10:35am
6
system
August 30, 2009, 10:45am
7
I don’t remember the names off the top of my head. Here is my HjT log:
Logfile of Trend Micro HijackThis v2.0.2
Running processes:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=desktop http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=presario&pf=desktop http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=presario&pf=desktop http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=presario&pf=desktop http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=presario&pf=desktop http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=presario&pf=desktop http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=desktop WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)@xpsp3res.dll ,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exehttp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab www.sysinternals.com - C:\DOCUME~1\COMPAQ~1.SHA\LOCALS~1\Temp\STSRL.exe
–
system
August 30, 2009, 10:59am
8
This is the list from the MBAM log:
Files Infected:
C:\WINDOWS\system32\Microsoft\avastform.exe (Trojan.Agent) → Quarantined and deleted successfully.
system
August 30, 2009, 11:02am
9
This is bad:
Install User Profile Hive Cleanup Service:Brief Description http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en
system
August 30, 2009, 11:16am
10
How is that program supposed to work? All it’s doing for me is opening the black box, blinking for a few seconds, and then closing.
Pondus
August 30, 2009, 12:15pm
13
Im not sure, i think it is only a fix for windows
Overview
The User Profile Hive Cleanup service helps to ensure user sessions are completely terminated when a user logs off. System processes and applications occasionally maintain connections to registry keys in the user profile after a user logs off. In those cases the user session is prevented from completely ending. This can result in problems when using Roaming User Profiles in a server environment or when using locked profiles as implemented through the Shared Computer Toolkit for Windows XP.
DavidR
August 30, 2009, 1:32pm
14
UHP Cleanup doesn’t do anything like a malware scanner, etc. you install it and it does its work at shutdown, to close stubborn processes. So this isn’t specifically a malware solution, but if malware was causing shutdown problems then it could help.
So if you aren’t suffering shutdown problems in XP (check your windows event viewer logs) then this is unlikely to help.
system
August 30, 2009, 5:58pm
15
Since your problems started after using Malwarebytes Anti-Malware, it seemswww.malwarebytes.org/forums
That 1st Entry in their Log ( “avastform.exe [Trojan.Agent]” ) looks highly
system
August 30, 2009, 10:33pm
16
Well, my problem isn’t specific to MBAM. I just want to know if there is some way to get Avast running again so I can run VRDB. That has always fixed this in the past. An alternate fix for all my corrupt files would be helpful too, if one exists.
system
August 31, 2009, 1:34am
17
Okay, UPH Cleanup did something. I braved a restart and it started right back up this time. Avast is running again. So thanks a million to YoKenny for that tip.
My scans are still slow as hell though. I tried to run a Quick Scan on Avast, and after 2.5 hours it had only gone through 7%. That’s usually how long it takes to do a Full Scan. ???
system
August 31, 2009, 3:51am
18
The time to do a Quick scan depends on a lot of factors such as hard drive speed and amount of data on the hard drive and to a lesser extent CPU speed and amount of system RAM.
Hi S-100 :