Computer Hope

Software => Computer viruses and spyware => Topic started by: PerpetuallyInTrouble on September 14, 2010, 11:53:04 AM

Title: Unknown Virus Infecting laptop?
Post by: PerpetuallyInTrouble on September 14, 2010, 11:53:04 AM
Hello;

My computer has since yesterday been running somewhat slow and has been freezing up more often that what should be usual glitches.
I tried to run a scan with Avast! Antivirus on my account, but the computer froze about 3% into it.

After that I switched to the administrator computer account and did a quick scan with Malwarebytes, which picked up 4 infected files that I terminated. However, the computer is still freezing when I try to run scans with the other programs, and I'm afraid a virus is lurking somewhere undetected.

In following with the steps given before posting a topic:
I tried to run a scan with Avast! as the first step in the removal, but it first froze at 3% about twice in row, causing me to have to take the battery out of my laptop and unplug it to restart. It got farther along after I purged some programs and things, getting up to 47% through a quick scan, but it never was able to finish.
I do have a functional up-and-running firewall, and I do not believe this would be causing any trouble.
I removed several programs, some which seemed suspicious, such as one called 'vision media' or something like that. Though other than that, most were just programs downloaded by others onto the account and couldn't be verified as anything that is spyware/malware.
I ran CC Cleaner about 4 different times between attempted scans, though it didn't help anything.
I tried to run SuperAntiSpyware, and it got about halfway through a thorough scan but then froze. I closed the window before it could freeze the rest of the computer and tried again. This time it got a bit farther in the process, but froze, forcing me to unplug the laptop once again.
I tried Malwarebytes after this once again, and while it got a little farther than a quarter of the way through the scan it didn't make it, as it froze and closed.
I updated my Java player and removed the old versions, which seemed to speed up the computer slightly.
I went over all the steps for HijackThis, and attached the log as I was told in the instructions.


Any help would be appreciated, thank you!


*EDIT*
When I first start up the computer, I get a notification saying
Error loading C:\Windows\logmPING.dll
I believe this might be part of the problem, and I know it probably needs a registry cleaner but I hope this will help in finding the source of the problem.


[recovering disk space - old attachment deleted by admin]
Title: Re: Unknown Virus Infecting laptop?
Post by: Windows98 on September 14, 2010, 01:05:41 PM
Your comment has been removed. Please do not post malware advice, or post here in the malware forum, unless you need help.
Title: Re: Unknown Virus Infecting laptop?
Post by: PerpetuallyInTrouble on September 14, 2010, 01:11:29 PM
Alright, thank you-

Both programs are on here for the sake of being thorough, I believe. My mother was the one who installed both of them, as we have had problems with other computers before and now take precaution.

I have not tried scanning in safe mode yet, nor have I tried a boot scan, but I will do both.

Now that I have researched the problem a bit more, I believe it happened this morning. I received a window that had something to do with an 'RunDLL Error', which leads me to believe it might be a registry problem. However, I do not know how to go about fixing that as it's a intricate part of the internal computer.
Title: Re: Unknown Virus Infecting laptop?
Post by: harry 48 on September 14, 2010, 01:14:24 PM
quote  Windows98  ;  A specialist will be here to help you with your problem

the experts do not like non-experts giving advice and to many posts in a topic makes them think the OP is being helped already
Title: Re: Unknown Virus Infecting laptop?
Post by: Windows98 on September 14, 2010, 01:32:31 PM
Your comment has been removed. Please do not post malware advice, or post here in the malware forum, unless you need help.
Title: Re: Unknown Virus Infecting laptop?
Post by: harry 48 on September 14, 2010, 03:34:05 PM
quote windows ;To harry48:
 My experience with malware/virus scanner/spwyware is getting programs to work and cleaning out whatever the program says is there.
 Any hidden or extra things lurking around is something I have had limited experience with, so thats where my experience ends.

I do read Hijack logs and go through them, its not particularly hard to go through the logs if you have some idea of what is to be expected and not expected.



likewise but the experts do not like non-experts to help in this section
Title: Re: Unknown Virus Infecting laptop?
Post by: SuperDave on September 14, 2010, 05:51:14 PM
Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

*************************************
I'm not sure if this will run on a 64 bit computer but please give it a try anyway.

Download Security Check by screen317 from one of the following links and save it to your desktop.

Link 1 (http://screen317.spywareinfoforum.org/SecurityCheck.exe)
Link 2 (http://screen317.changelog.fr/SecurityCheck.exe)

* Unzip SecurityCheck.zip and a folder named Security Check should appear.
* Open the Security Check folder and double-click Security Check.bat
* Follow the on-screen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Post the contents of that document in your next reply.

Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.

****************************************
Download OTL (http://oldtimer.geekstogo.com/OTL.exe)  to your Desktop
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
c:\$recycle.bin\*.* /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
nvstor32.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
explorer.exe
svchost.exe
userinit.exe
qmgr.dll
ws2_32.dll
proquota.exe
imm32.dll
kernel32.dll
ndis.sys
autochk.exe
spoolsv.exe
xmlprov.dll
ntmssvc.dll
mswsock.dll
Beep.SYS
ntfs.sys
termsrv.dll
sfcfiles.dll
st3shark.sys
ahcix86.sys
srsvc.dll
nvrd32.sys
/md5stop
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

Title: Re: Unknown Virus Infecting laptop?
Post by: PerpetuallyInTrouble on September 15, 2010, 08:03:38 AM

I have attached all three logs in order from Checkup, OTL and then Extras.

I was not sure whether you meant to post them in the actual reply or not, but as they were quite long I assumed I was supposed to attach. Apologies if this was incorrect.  ???

[recovering disk space - old attachment deleted by admin]
Title: Re: Unknown Virus Infecting laptop?
Post by: SuperDave on September 15, 2010, 11:51:56 AM
The Security check shows that you're using avast! Free Antivirus and  McAfee SecurityCenter. If McAfee Security Center also has an Anti-Virus , one of these AV programs will have to be disabled because you should not run two AV progams on a computer.   

Please download the newest version of Adobe Acrobat Reader from Adobe.com (http://www.adobe.com/products/acrobat/readstep2.html)

Before installing: it is important to remove older versions of Acrobat Reader since it does not do so automatically and old versions still leave you vulnerable.
Go to the Control Panel and enter Add or Remove Programs.
Search in the list for all previous installed versions of Adobe Acrobat Reader. Uninstall/Remove each of them.

Once old versions are gone, please install the newest version.
*****************************************
I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
 ESET OnlineScan (http://eset.com/onlinescan)
•Click the (http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetOnline.png) button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
•Check (http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetAcceptTerms.png)
•Click the (http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetStart.png) button.
•Accept any security warnings from your browser.
•Check (http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetScanArchives.png)
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push (http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetListThreats.png)
•Push (http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetExport.png), and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the (http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetBack.png) button.
•Push (http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetFinish.png)
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

Title: Re: Unknown Virus Infecting laptop?
Post by: PerpetuallyInTrouble on September 15, 2010, 07:13:31 PM
I installed the new version of Adobe Reader and removed the old versions.

But I cannot scan the computer without it freezing.
It gets to 33% through and then crashes.
Title: Re: Unknown Virus Infecting laptop?
Post by: SuperDave on September 16, 2010, 04:51:30 PM
Did you check to verify that you do not have more than one AV program running on your computer? This could cause the computer to crash.

64 bit computers leaves me with very few tools to scan your computer and I've just about reached the end of them. This sounds like more of a hardware problem. Is it possible that your computer is over-heating?
Title: Re: Unknown Virus Infecting laptop?
Post by: PerpetuallyInTrouble on September 16, 2010, 07:11:38 PM
I have only Avast! Antivirus on my computer.

Though I believe it has something to do with a rundll error.
Title: Re: Unknown Virus Infecting laptop?
Post by: SuperDave on September 17, 2010, 11:35:18 AM
Quote
Though I believe it has something to do with a rundll error
Are you getting an error about that ?

Please do the regardless whether or not you have the OS disk. If the program asks for the disk, we'll know there is a problem with the files.

Do you have your OS  CD/DVD?

If so,

1/ Click the Start button.

2/ From the Start Menu, Click All programs followed by Accessories.

3/ In the Accessories menu, Right Click on the Command Prompt option.

4/ From the drop down menu that appears, Click on the Run as administrator option.

5/ If you have the User Account Control (UAC) enabled you will be asked for authorisation prior to the command prompt opening. You may simply need to press the Continue button if you are the administrator or insert the administrator password etc.

6/ In the Command Prompt window, type: sfc /scannow and then press Enter.

7/ A message will appear stating that the system scan will begin.

8/ Be patient because the scan may take some time.

9/ If any files require replacing SFC will replace them. You may be asked to insert your Vista DVD for this process to continue.

10/ If everything is okay you should, after the scan, see the following message Windows resource protection did not find any integrity violations.

11/ After the scan has completed, Close the command prompt window.