Problems with laptop even after factory reset due to virus [Closed]

Hi techderp2

Can you tell me if this is a corporate/company computer or a home business computer? Working on a corporate computer can sometimes change settings and potentially harm your system which your company might not be too pleased about and could leave us liable for a lawsuit. Please let me know if this is the case.

Meanwhile:

Run Security Check

Download Security Check by screen317 from here or here.

• save it to your Desktop.
• double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
• a Notepad document should open automatically called checkup.txt; please post the contents of that document.

Satchfan

Results of screen317's Security Check version 0.99.73
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Microsoft Security Essentials
Symantec Endpoint Protection
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version
Java™ 6 Update 20
Java version out of Date!
Adobe Flash Player 10 Flash Player out of Date!
Adobe Reader 9 Adobe Reader out of Date!
Google Chrome
Google Chrome
````````Process Check: objlist.exe by Laurent````````
Norton ccSvcHst.exe
Microsoft Security Essentials MSMpEng.exe
Microsoft Security Essentials msseces.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 4%
````````````````````End of Log``````````````````````

Thanks for explaining.


Multiple antiviruses & firewalls

You have Symantec Endpoint Protection and Microsoft Security Essentials, (MSE) antivirus programs installed and 2 firewalls which is probably causing most of the problems.

You can not run two real-time antiviruses at the same time. Although many have different methods of searching for and recognising threats, they will all be 'fighting' in memory to kick each other out, rendering them both ineffective. The same applies to firewalls.

As Symantec Endpoint Protection is the complete package including a firewall, (and tailored specifically for business), you may want to stick with this, in which case you must uninstall MSE but the choice is yours. 1. Click Start, Control Panel, Programs and Features.
2. Click on either Microsoft Security Essentials or Symantec Endpoint Protection and then Uninstall. .
Next

According to which you have uninstalled, do the following:

If you uninstalled Symantec Endpoint Protection

You may still have remnants of Norton on your computer.

• download the Norton Removal Tool from here and save it to your desktop.
• double click on Norton_Removal_Tool.exe to run the tool.
• follow the on-screen instructions.

Your computer may be restarted more than once, and you may be asked to repeat some steps after the computer restarts.

If you uninstalled Microsoft Security Essentials

• open Windows Firewall by clicking Start, Control Panel, and then click Windows Firewall.
• on the left, click Turn Windows Firewall on or off. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
• click Off (not recommended) , and then OK.

===================================================

Note: If you have MalwareBytes Anti-Malware 1.6 or higher installed and are using the Pro version or trial version, please temporarily disable it for the duration of this fix as it may interfere with the successfully execution of the script below.

Run OTL

• double click on the icon to run it.
• copy/paste ALL the following text written inside the code box into the Custom Scans/Fixes box located at the bottom of OTL
  
  

  :Services
  
  :OTL
  IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {AB466613-01DA-4383-A07C-2A6F27E2506F}
  IE:64bit: - HKLM\..\SearchScopes\{2694B2BA-2676-40FD-B3AF-26E148F06D72}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
  IE - HKLM\..\SearchScopes\{2694B2BA-2676-40FD-B3AF-26E148F06D72}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
  IE - HKU\S-1-5-21-35032836-590776733-864693970-1000\..\SearchScopes\{2694B2BA-2676-40FD-B3AF-26E148F06D72}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
  
  :Files
  ipconfig /flushdns /c
  
  :Commands
  [purity]
  [emptytemp]
  [Reboot]

  
  
• click the Run Fix button at the top
• let the program run unhindered, reboot when it is done
• please post the OTL fix log but don’t run OTL again until all these instructions are completed.

===================================================

I’d like you to try and run AdwCleaner again.

When you have completed all of the above, please run OTL and SecurityCheck again and send the logs.

Logs to include in the next post:

OTL fix log
AdwCleaner log
Checkup.txt
New OTL log

Thanks

Satchfan

Before I proceed, I was just wondering if there is actually something very wrong with my computer (like presence of a trojan or virus)? I am mainly worried about data theft. Thank you.

I have found no evidence of anything that would contribute to data theft. However, having multiple antivirus programs running can increase the computer's vulnerability and leave it open to such attacks. Satchfan

Thank you so much. I will remove one of my antivirus programs. I feel a bit iffy about changing too much of the system unless it's a virus. But thank you so so so much for helping me out. I really appreciate it!

I feel a bit iffy about changing too much of the system unless it's a virus

The thing many people worry about is lack of protection but with 2 antiviruses you're more likely to be affected by a virus attack than with one because neither of the 2 is able to do it's job properly.

I would also say this is what you think is a problem with your computer even though the infection seems to have gone. I think you'll find it will behave much better with one firewall and one antivirus - (and be better-protected)..

Please continue with the other instructions.

Thanks

Satchfan

Hi techderp2 It has been several days since I sent my last set of instructions to help with your computer problem. Please let me know if you are having problems and still need help. Thanks Satchfan

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html and start a new topic