Virus preventing programs from opening [SOLVED - SystemRestore]

Viruses and worms
1

Could use a lot of help on this one, I beleive a virus is preventing any of my programs from opening.

Starting today (I have had a history of lots of viruses), whenever I try to open programs such as: Steam, Minecraft, Razer-Gamebooster (etc) they do not open or they crash as soon as they open. I have a feeling its one of those viruses that spreads everytime you open a program, and im probably gonna get the answer “Run a virus scan”. I am right now (almost done) with malwarebytes, then doing avast.

Not sure what else to do, ive looked up the problem and nothing will open. Im afraid to restart or do anything incase it gets worse and ends up breaking my entire computer, making it unable to boot.

Any suggestions? The only things that seem to be running are anti-viruses, everything else is randomly crashing.

ANY help would be appreciated ;D

Malwarebytes - http://pastebin.com/yEjP3dFj

OTL logs added as attachment

2

Please follow this guide and attach the requested logs: http://forum.avast.com/index.php?topic=53253.0

Needed are OTL, aswMBR and Malwarebytes.

3
I have a feeling its one of those viruses that spreads everytime you open a program,
that would be a fileinfector..... if so avast should go bananas with popup warnings

attach the requested logs…

4

Could I get any advice on this? I need to restart to finish the virus remoavl from malwarebytes but not sure what would happen if it is an infection, i cant open any EXE’s at all. (Besides browsers, anti-viruses and task manager.)

edit: OTL logs added as attachment.

Sorry, should of posted this in the reply.

Added to both anyways.

5

try run OTL from safe mode…

edit: OTL logs added as attachment.
easier to find the logs if you attach in your reply...instead of attacing in previous post. ;)
6

Hi,

Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

[*]Click on the Scan button.
[*]After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

[*]After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
[*]Post logfile will also be saved in the C:\AdwCleaner folder.

===========================================

Please download aswMBR and save it to your desktop.

Double click aswMBR.exe to start the tool.

[*]Select Yes if prompted to download the Avast database.
[*]Click Scan
[*]Upon completion of the scan ( Scan finished successfully ) click Save log and save it to your desktop, and post that log in your next reply for review.
Note: do NOT attempt any Fix yet.

==============================================

Please download Farbar Recovery Scan Tool by Farbar and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Under Optional Scan ensure “List BCD” and “Driver MD5” are ticked.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

7

-snip-

8
[b]Is all of that really necessary?[/b]...well to be sure I'll just go along with it.
removing malware can be a very complex operation.... the bad guys dont make it easy. they use many smart tricks to avoid detection/removal

trust the removal expert, he know what he is doing

9

FRST isn’t generated properly, re-run it again. Make sure to attach Addition.txt too, as well as Adwcleaner…

Adwcleaner deletes only bad things, you can be sure…

10

FRST got stuck at “Checking chrome”, i was there at least 10 minutes waiting for it with my browsers closed. i really dont want to wait an hour for one scan to complete…

I’ll finish doing the adware one and restart with the logs for it, FRST is probably not gonna happen cause it keeps getting stuck.

11

Ok, post Adwcleaner report, and then try to run FRST…

12

Replying with Adware logs and FRST.

Also, I didnt open any EXE’s but “Catalyst Control Center: Host Application” crashed after restarting for no reason, im guessing because its something that runs on startup and exe’s still cant run ):

FRST is done. posting attachments.

Oh sorry, forgot addition.

Attached.

13

I still need Addition.txt that FRST made. It will be on the same location as FRST.txt

14

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

CHR HKLM-x32\...\Chrome\Extension: [banjjklfojcdbofbhbgiedekefohoaff] - C:\Users\Anthony\AppData\Local\CRE\banjjklfojcdbofbhbgiedekefohoaff.crx
C:\Users\Anthony\AppData\Local\CRE\banjjklfojcdbofbhbgiedekefohoaff.crx
CHR HKLM-x32\...\Chrome\Extension: [boalolmjphaheejepjcjcpngbeimiend] - C:\Users\Anthony\AppData\Local\CRE\boalolmjphaheejepjcjcpngbeimiend.crx
C:\Users\Anthony\AppData\Local\CRE\boalolmjphaheejepjcjcpngbeimiend.crx
CHR HKLM-x32\...\Chrome\Extension: [edfllcfghbogdahicgpcmnmkgpcmdjeo] - C:\Users\Anthony\AppData\Local\CRE\edfllcfghbogdahicgpcmnmkgpcmdjeo.crx
C:\Users\Anthony\AppData\Local\CRE\edfllcfghbogdahicgpcmnmkgpcmdjeo.crx
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
C:\Users\Anthony\jagex_cl_runescape_LIVE.dat
C:\Users\Anthony\random.dat
C:\Users\Anthony\AppData\Local\Temp
AlternateDataStreams: C:\Users\Anthony\Downloads\blitzkrieg_v4.6.1.1.exe:BDU
AlternateDataStreams: C:\Users\Anthony\Downloads\RoR-Setup-0.38.67.exe:BDU
cmd: ipconfig /flushdns

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

15

I did the fix, restarted. Attaching log.

There is a folder on my desktop in another language (Looks like japanese) with a bunch of my programs such as skype and avast. I’ll just leave that there until instructed, im gonna guess that was part of the fix.

Heres the log.

Catalyst Control center continues to crash on startup. Not opening any EXE’s until told, hopefully they work =/

16

Crap =-=. Everything continues to crash, tried running a windows assesment and it crashed. Catalyst is crashing, so videos look ugly (Or anything graphical related) and i just cant run anything without it crashing right away. Awaiting an answer still…

17

since the time is past midnight here in europe TwinHeadedEagle may not be online again untill tomorrow

18

I’m thinking about a system restore from about a week ago, worth a shot and wont lose too much.

19

System restore seems to have did the trick. Its from the 29th of november, Im gonna re-download malwarebytes and do a scan to get rid of all the previous infections that i removed earlier.

Solved, looks like i did all those scans for nothing, yet i still dont know what caused all this. Im gonna be careful and take note of everything that happens in the next couple days.

20
yet i still dont know what caused all this.
well your AdwCleaner log was full of browser crap.....