Unknown infection and can't run FRST [Solved]

Something serious is down deep in my system. It has been slowing it down more and more. I know I am running 32 bit but the FRST file will not even open saying it "is not a valid Win32 application." Just for kicks, I downloaded the 64 bit version but it clearly states that it will not work on my system.

Before that, I ran the MBR file as admin and got this result: {Please note that these results say I am running a version before Win 7 which I don't get at all}

Hello GeekStyle59 and welcome to the WTT forum.

My name is Satchfan and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:

• please follow all instructions in the order posted
• please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear
• all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked
• if you don't understand something, please don't hesitate to ask for clarification before proceeding
• the fixes are specific to your problem and should only be used for this issue on this machine.
• please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested


Run RogueKiller

IMPORTANT: Please remove any usb or external drives from the computer before you run this scan!

Close all running programs.

Download RogueKiller to your desktop

• close all running programs
• for Windows Vista/Seven, right click -> run as administrator, for XP simply double-click on RogueKiller.exe
• when the pre-scan is finished, click on Scan
• click on Report and copy/paste the content in your next post
• NOTE: DO NOT attempt to remove anything that the scan detects –everything that is reported is not necessarily bad

If the program is blocked, continue to try it several times. If it still doesn’t work, (it could happen), rename it to winlogon.exe.

Please post the contents of the RKreport.txt in your next reply.

If you have trouble running it, try it in safe mode:

How to start Windows in Safe Mode - Windows 7/Vista

Satchfan

 

Hello Satchfan!

Thank you for your response. I have run Rogue Killer as requsted.

Satchfan,

I attached the report but can't see if it uploaded to you.

GeekStyle59

I don't want it uploaded; just copy and paste it in your post please.

Oh, OK! Here it is:

FYI Satchfan, I have just read through it. My host file is too big, it says, but I have used the MVPS host file for protection. Is that a mistake? Also, the Sleep Mapper thing is for my medical CPAP machine. I had uninstalled the program from the Control Panel, but this keeps showing on reboots that the program may not load properly – probably because this file didn't get uninstalled, right?

Can you run another scan.
 

• Please download MGADiag by clicking here and save it to your desktop.
• double click the [external image: diagicon.png] icon on your desktop.
• push [external image: continue.png]
• push [external image: copy.png]
• go to Start -> Run and type in "Notepad"
• go to Edit -> Paste in notepad.
• "x" out all of the numbers and letters in the line beginning with "Windows Product Key:"
• Copy and paste that log here.

Thanks

Satchfan

Here are the MGADiag results:

Oops! Just did a rescan (this time just the Quick Scan ) with Ad Aware and see where I missed the option to download the report – but it really said it found nothing.

No disk in the drive. Please insert a disk into drive \Device\Harddisk3\DR3

That error is usually associated with an external USB-connected device.


After a brief glance I can see no obvious malware but a hugely over-protected computer which could be your problem. We wouldn’t normally advise uninstalling programs on a heavily-infected computer but I would feel that this is not the case and could solve some of your problems, (if not all).

First

IObit Security 360 is a rogue security program known to cause system problems and that had stolen material from other computer security companies to use in their own program.

I recommend that you uninstall IObit. It is has been proved to be untrustworthy in its programming and is pretty ineffective now that it can no longer be propped up by MBAM. Also uninstall iObit’s Driver Booster 2.

See:

http://forums.malwarebytes.org/index.php?showtopic=29681
http://forums.malwarebytes.org/index.php?showtopic=30989
http://forums.malwarebytes.org/index.php?showtopic=33217

===================================================

Multiple antiviruses

You have Ad-Aware and Avast antivirus programs installed.

You can not run two real-time antiviruses at the same time. Although many have different methods of searching for and recognising threats, they will all be 'fighting' in memory to kick each other out, rendering them all ineffective.

I would suggest you uninstall Ad-Aware but it is your choice.

• click Start, Control Panel, Programs and Features
• scroll down the list click on either Ad-Aware or Avast and then on Remove.

===================================================

CCleaner

While CCleaner is safe and useful for removing temporary and junk files, I do not recommend using the built-in registry cleaner unless you have a good understanding of the registry. In fact, I do not recommend the routine use of registry cleaners/optimizers ever, unless you are an expert.

One of the malware experts, miekiemoes, has an excellent write-up here
Another excellent article by Bill Castner is located here
Another from quietman7 here

When you have done all of the above, please try FRST again and tell me if your computer is running any better.

Satchfan

Just noticed SafeSearch - please also uninstall that.

Wow, Satchfan! I uninstalled the following (including the first which you did not catch):

Iobit Uninstaller

Advanced System Care Pro

Driver Booster 2

Ad-Aware (which, in truth, I had only downloaded in an effort to try to find the probelm before posting here and selected the option that irecognized AVast was already uninstalled)

 and Avast found SafeSearch and unistalled it with my permission before your response came to me.

Let me tell you HOW much has changed (but has not solved the main problem I was having which is that Adobe Lightroom will no longer work properly in the develop module) — even my wallpaper!!!

Will continue to test other aspects of the system's performance and specific programs but ATM I am DEEPLY impressed!!!! Must tend to my granddaughter before seeing if I can now download FRST.