Previous Topic Here As requested, I installed and ran Combofix, with a slightly different error this time. It only said "incompatible OS", as opposed to the longer message previously. What should I try next? Also, recently had my computer get really slow, with audio and mouse glitching after windows forced an update on me. After multiple restarts, it now can connect to the internet again and seems to be running normally, with no updates left, that I can tell.
Hi keeperreff
Please download Farbar Recovery Scan Tool and save it to your desktop.
Note : You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt ) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt ). Please attach it to your reply.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-07-2013
Hi Keeperref
Welcome back
Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it on your desktop as
fixlist.txt NOTE . It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
start
MountPoints2: {2115edd7-fcc4-11e1-9c53-101f740c6b71} - I:\MotoCastSetup.exe -a
MountPoints2: {39068832-ccc6-11e2-bb2a-101f740c6b71} - H:\MotoCastSetup.exe -a
MountPoints2: {3d0d5a66-2ed6-11e2-812d-101f740c6b71} - L:\MotoCastSetup.exe -a
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
::1 localhost
LastRegBack: 2013-07-16 16:19
end
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
.
Run
FRST64 and press the
Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.
Hey Robybel,
I just had a few questions. One, does it specifically have to be a separate flash drive that I save this to or will the desktop work? Also, I don't know what you mean by entering System Recover Options, nor do I understand why I am doing so, as there appears to be no follow on step afterwards. Please help me get a better understanding.
Thanks,
Andrew
Hi Keeperref
I'm sorry, I was wrong to give you the instructions, I edited my previous post
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-07-2013
Ran by [removed] at 2013-07-21 16:20:11 Run:1
Running from C:\Users\[removed]\Desktop\Fix tools
Boot Mode: Normal
==============================================
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2115edd7-fcc4-11e1-9c53-101f740c6b71} => Key deleted successfully.
HKCR\CLSID\{2115edd7-fcc4-11e1-9c53-101f740c6b71} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{39068832-ccc6-11e2-bb2a-101f740c6b71} => Key deleted successfully.
HKCR\CLSID\{39068832-ccc6-11e2-bb2a-101f740c6b71} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3d0d5a66-2ed6-11e2-812d-101f740c6b71} => Key deleted successfully.
HKCR\CLSID\{3d0d5a66-2ed6-11e2-812d-101f740c6b71} => Key not found.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer => Value deleted successfully.
Error: The restore operation should be done in the recovery mode.
==== End of Fixlog ====
Hi Keeperref
Sorry for delay
I think we need to re-run the tool, but this time in recovery environment, because the script did not work at 100%
First, let me know if you can run combofix
Try this now:
Drag in the trash, your old icon of combofix,
(if present on your desktop) Please read through these instructions to familarize yourself with what to expect when this tool runs
Refer to the
ComboFix User's Guide
Download ComboFix from one of these locations:
* IMPORTANT- Save ComboFix.exe to your Desktop
====================================================
Disable your AntiVirus and AntiSpyware applications , usually via a right click on the System Tray icon. They may otherwise interfere with our tools.
Note :
If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs
====================================================
Double click on combofix.exe & follow the prompts.
When finished, it shall produce a log for you. Please include the
C:\ComboFix.txt in your next reply for further review.
NOTE : If you encounter a message "
illegal operation attempted on registry key that has been marked for deletion " and no programs will run - please just reboot and that will resolve that error.
Same error as always, unfortunately. However this time it only said "Incompatible OS", without the full description it usually has.
Hi Keeperref
Please open your MalwareBytes AntiMalware Click the Update Tab and search for updates If an update is found, it will download and install the latest version. Once the program has loaded, select "Perform Quick Scan" , then click Scan. The scan may take some time to finish, so please be patient. When the scan is complete, click OK , then Show Results to view the results. Make sure that everything is checked, and click Remove Selected . <– very important When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note) The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM. Copy&Paste the entire report in your next reply. Extra Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.
Next
ESET Online Scanner I'd like us to scan your machine with ESET OnlineScan
Note: If you are using Windows Vista/7, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.
*Note It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time. Hold down Control and click on the following link to open ESET OnlineScan in a new window.ESET OnlineScan Click the [external image: Posted Image] button. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop. Double click on the [external image: Posted Image] icon on your desktop. Check [external image: Posted Image] Click the [external image: Posted Image] button. Accept any security warnings from your browser. Check [external image: Posted Image] Make sure that the option "Remove found threats" is Unchecked Push the Start button. ESET will then download updates for itself, install itself, and begin When the scan completes, push [external image: Posted Image] Push [external image: Posted Image] , and save the file to your desktop using a unique name, such as MyEsetScan . Alternatively, look for report in C:\Program Files\ESET\ESET Online Scanner\log.txt . Include the contents of this report in your next reply.Push the Back button.Select Uninstall application on close check box and push [external image: Posted Image] On your next reply please post :
Let me know if you have any problems in performing with the steps above or any questions you may have.
Good Day!
First, MBAM
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
Database version: v2013.08.05.09
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16635
Andrew :: ANDREW-HP [administrator]
8/5/2013 11:28:37 PM
mbam-log-2013-08-05 (23-28-37).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 236279
Time elapsed: 19 minute(s), 39 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 1
C:\$Recycle.Bin\S-1-5-21-3901448862-4086357070-749506306-1000\$RAAAOMQ.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
(end)
The scan took so long I had to leave it running overnight, hence why I only posted one.
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=ce8673d8ae9ff84ebec79d83dc8aeb84
# engine=14680
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-07 07:14:10
# local_time=2013-08-07 03:14:10 (-0500, Eastern Daylight Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 0 127446300 0 0
# compatibility_mode=8450 16777213 85 99 4062780 60719214 0 0
# scanned=361458
# found=0
# cleaned=0
# scan_time=63387
Results of screen317's Security Check version 0.99.72 ``````````````Antivirus/Firewall Check:`````````````` WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Adobe Reader out of Date! Firefox out of Date! ````````Process Check: objlist.exe by Laurent```````` `````````````````System Health check````````````````` ````````````````````End of Log``````````````````````
You miss ESET log