Weird computer behavior, explorer.exe blacks out occasionally.

Viruses and worms
1

Hey!
Ive had some weird computer behavior recently…
Today, when i was saving a file my explorer.exe blacked out, then was set to default. Some of my opened programs crashed, and didnt turn on for some time. Once i could get things working again, a registry error was found and fixed, and the windows appeared normal. The windows only blacked out for a second, but they stayed without using areo until that time. I scanned with RK, and Adw, but nothing was found, so i tried tddskiller… three threats were found… - attaching logs! Also, I am now using adblock on google chrome, since avast!s is gone, and that may be the culprit, but it didnt show in adw.
Thank you.

EDIT: During the aswmbr scan, two windows system 32 drivers were hidden. ( info may make the process quicker)
EDIT: Mbam was downloaded thorough multiple links from the forums, the sites may have done harm, but most of the logs were made before mbam! shall i re scan?

2

One more log!
Malwarebytes found nothing, so im not uploading that log file.

3

Hello,

Please download GMER, AntiRootkit tool from the link below and save it to your Desktop:

Gmer download link
Note: file will be random named

Double-clicking to run GMER.

[*]Wait for initial scan to finish - if there is any query, click No;
[*]Click Scan button and wait until the full scan is complete;
[*]Click Save … - save the report to the Desktop (named Gmer );

Attach here Gmer logreports.

Then…

Please download Farbar Recovery Scan Tool by Farbar and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Under Optional Scan ensure “List BCD” and “Driver MD5” are ticked.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

4

FRST Logs, and GMER logs posted here…

5

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

S3 RkHit; C:\Windows\SysWow64\drivers\RKHit.sys [34736 2010-12-30] ()
C:\Windows\SysWow64\drivers\RKHit.sys
S0 59046741; system32\drivers\99787765.sys [x]
S0 78475126; system32\drivers\30164555.sys [x]
S3 silabenm; system32\DRIVERS\silabenm.sys [x]
S3 silabser; system32\DRIVERS\silabser.sys [x]
S3 WacHidRouter; system32\DRIVERS\wachidrouter.sys [x]
S3 wacomrouterfilter; system32\DRIVERS\wacomrouterfilter.sys [x]
C:\Users\Guest\AppData\Local\Temp
cmd: ipconfig /flushdns

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

6

Thank you very much!
Fix log attached here…

7

Run FRST again and attach fresh scan…

Tell me as well as, how are system running now?

8

Everything seems okay…
Although, I just scanned with rogue killer, and some new things were found. They might just be from the scanner, but who knows. The FRST log, and RK log has been attached.

9

Rogue Killer blocked legit files, and some leftovers we previously fixed…

Your PC is clean, if no other questions, we’re done here?

10

Yep, thank you so much for the help!

11

Please download DelFix by “Xplode” to your Desktop.

Run the tool and check the following boxes below;

[] Remove disinfection tools
[] Create registry backup
[*] Purge System Restore

Now click on “Run” button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt

I don’t need DelFix log report.