Skip to main content
Start a Conversation

This post is more than 5 years old

Solved!

Go to Solution

ejcurry

59 Posts

3554

May 29th, 2011 20:00

win32 root/kit slowly killing computer need help please

here is the r/kill file

 

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 05/25/2011 at  0:08:45.
Operating System: Microsoft Windows XP


Processes terminated by Rkill or while it was running:

C:\Documents and Settings\All Users\Application Data\yiMjvSkpKyOa.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\WINDOWS\System32\vssvc.exe
c:\PROGRA~1\mcafee\msc\mcupdmgr.exe
C:\Program Files\Secunia\PSI\sua.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\iExplore.exe
D:\iExplore.exe


Rkill completed on 05/25/2011 at  0:09:17.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 05/25/2011 at  0:47:01.
Operating System: Microsoft Windows XP

ejcurry

59 Posts

June 1st, 2011 07:00

i re-installed mcafee, it is up and running. i am trying to find the cd for the original computer set up to reload the media device. i right clicked and everything was fine nothing or no yellow question mark.when i go to conteol panel ,sounds and audio.it says i have no audio device. i will look now.

kevinf80_1d0ac6

2 Intern

 • 

1.1K Posts

June 1st, 2011 09:00

OK, continue as follows please :-

Step 1

Remove Combofix now that we're done with it



  • Please press the Windows Key and R on your keyboard. This will bring up the Run... command.
  • Now type in Combofix /Uninstall in the runbox and click OK. (Notice the space between the "x" and "/")user posted image



  • Please follow the prompts to uninstall Combofix.
  • You will then recieve a message saying Combofix was uninstalled successfully once it's done uninstalling itself.


The above procedure will delete the following:

  • ComboFix and its associated files and folders.
  • VundoFix backups, if present
  • The C:_OtMoveIt folder, if present
  • Reset the clock settings.
  • Hide file extensions, if required.
  • Hide System/Hidden files, if required.
  • Reset System Restore.


It is very important that you get a successful uninstall because of the extra functions done at the same time, let me know if this does not happen.

Step 2





  • Download OTC by OldTimer and save it to your desktop. Alternative mirror
  • Double click user posted image icon to start the program. If you are using Vista or Windows 7, please right-click and choose run as administrator
  • Then Click the big user posted image button.
  • You will get a prompt saying "Begining Cleanup Process". Please select Yes.
  • Restart your computer when prompted.
  • This will remove tools we have used and itself. Any tools/logs remaining on the Desktop can be deleted.



Step 3

Remove the ESET Online Scanner components from your computer, start the Add or Remove Programs applet from Start > Control Panel, select the ESET Online Scanner entry and click Remove. This will happen quickly, only re-boot if prompted.

Step 4

Your Adobe Acrobat Reader is out of date. Older versions are vulnerable to attack and exploitation.

Please go to the link below to update.

Adobe Reader Untick the Free McAfee® Security Scan Plus (optional) unless you want it. (not required)

Step 5

You are using an old version of Java. Sun's Java is sometimes updated in order to eliminate the exploitation of vulnerabilities in an existing version.
For this reason, it's extremely important that you keep the program up to date, and also remove the older more vulnerable versions from your system.
The most current version of Sun Java is: Java Runtime Environment Version 6 Update 25.




















  • Go to Sun Java
  • Select Windows 7/XP/Vista/2000/2003/2008 If using 64 bit OS Select Information about the 64-bit Java plug-in and follow prompts
  • Install the new version by running the newly-downloaded file with the java icon which will be at your desktop, and follow the on-screen instructions.
  • Reboot your computer



After Adobe reader and Java are updated check in Add/Remove programs, make sure any old versions were overwritten; if not uninstall them...

Step 6

Download user posted image TFC to your desktop, from either of the following links
Link 1
Link 2







  • Save any open work. TFC will close all open application windows.
  • Double-click TFC.exe to run the program. Vista or Windows 7 users right click and select "Run as Administartor"
  • If prompted, click "Yes" to reboot.


Save any open work. TFC will automatically close any open programs, let it run uninterrupted. It shouldn't take longer take a couple of minutes, and may only take a few seconds. TFC may re-boot your system, if not Re-boot it yourself to complete cleaning process <---- Very Important

Let me know if all above steps completed OK, also tell me of any issues or concerns that you may have....

Kevin




kevinf80_1d0ac6

2 Intern

 • 

1.1K Posts

June 1st, 2011 14:00

What happens when you try to update windows?

Was this post helpful?

View All

No Events found!

Top