[DanaO]

Your final question was about how the computer is running now... Is it time to check Windows Mail where the problem was occurring?

Other than that, IE and Firefox seem to be working fine.

[Advertisements]

Well, even Windows Mail seems to be working now... at least for the short time I had it open.
What next? Does this mean we're done? If so, I would like to compliment you on your quick responses, the extreme clarity of your instructions, and the apparent success of the procedure you have walked me through. Great work! Thank you!
joe

[DanaO]

Well, even Windows Mail seems to be working now... at least for the short time I had it open.
What next? Does this mean we're done? If so, I would like to compliment you on your quick responses, the extreme clarity of your instructions, and the apparent success of the procedure you have walked me through. Great work! Thank you!
joe

[Machiavelli]

Well, even Windows Mail seems to be working now... at least for the short time I had it open.

If you don't have problems with that now we are done ...

Your PC is clean. If you are cool and nice a feedback in this forum here would be really nice. (You don't have to do this, but it would be nice)

- FIRST -

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  

  :OTL
  O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll File not found
  O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
  O4 - HKLM..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter File not found
  @Alternate Data Stream - 897 bytes -> C:\Users\Dana\Documents\Delivery status notification.eml:OECustomProperty
  @Alternate Data Stream - 10490 bytes -> C:\Users\Dana\Documents\A fellow Quilter's request.eml:OECustomProperty
  @Alternate Data Stream - 1040 bytes -> C:\Users\Dana\Documents\Weekly update.eml:OECustomProperty
  
  :Commands
  [EMPTYTEMP]
  [CLEARALLRESTOREPOINTS]
  

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done

- NEXT -

Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.



- NEXT -

I want you to uninstall following programs (Start > Control Panel > Add/Remove Programs):

• ESET

What's with MBAM?

Malwarebytes is a very good free scanner! It isn't a one demand scanner so it won't have any problems with your AntiVirus! It would be good if you scan your PC after Malware every 1-2 months (of course with Malwarebytes).
But if you like to uninstall it, then make that:

I want you to uninstall following programs (Start > Control Panel > Add/Remove Programs):

• Malwarebytes

- NEXT -

Download File-Hippo Updatechecker http://www.filehippo.../updatechecker/ Please run it monthly - it will scan your Updatestatus. For example a program is out dated the UpdateChecker will give you a link where you can download the newest version of the respective program.

How to update programs with FileHippo Updatechecker?

• Start FileHippo Updatechecker
• You get redirected to a Website
• You probably see a list of updates (if not then are probably all programs up to date)
• Click on the first item of the list, download the Update , after that reboot the Computer and take the next item of the list!

- NEXT -

JavaRa

• Please go to the following link: http://singularlabs....avara-download/
• Click on located next to Stable version to download JavaRa and save this file to your Desktop.
• Right click on the downloaded file, click Extract All then click on Extract
• In the newly created folder, right click on JavaRa.exe and select Run as administrator.
• When JavaRa opens, click on Remove Java Runtime then click on Next.
• Click Perform Removal Routine. This should take a few seconds to complete then show a dialog box afterwards, click OK.
• When that finishes, click on Search For Updates
• When prompted, select Update Using jucheck.exe
• When it finishes updating, reboot your computer

Please also update these Programs:

• AdobeReader

- NEXT -


Exercise common sense

Having security programs installed is very helpful to you, but none of them have the gift of human thought. The best way to make sure you don't get infected is to look before you leap. Be careful of what websites you visit - if a site looks suspicious, trust your instincts and get out of there. Be careful of what attachments you open in emails and files you download from websites - check them over carefully and look at the file extensions to make sure that you know what you're getting. Using peer-to-peer file sharing programs or downloading cracks and keygens is something else to avoid - the files you will be downloading are infected in the vast majority of cases, and the benefits simply aren't worth the risk to your computer.

Keep up on Windows updates

Along with keeping all of the security programs that you choose to use updated, it is also important to keep up on system updates from Microsoft, as these patch critical security vulnerabilities and help to keep you safe. Typically the windows update icon will appear in your taskbar when new updates are available, whenever you see it you should open the menu up and install the updates that are available. Although it may be an annoyance, that little bit of extra time it takes to stay updated is very well worth it instead of getting infected from an exploit and having to clean your PC again.

Slow computer?

If your computer begins to slow down again in the future for no particular reason, your first step should not be to come back to the malware forum. As your computer ages and is used, its parts wear, files and programs accumulate, and its performance speed can decrease. To restore your computer's performance to its best possible level, follow the steps in this guide (http://www.geekstogo...g-your-machine/) written by tech expert Artellos.

Keep safe!

[DanaO]

FYI, I went through most of the above steps, up to and including installing the upgrade checker and then upgrading the identified programs. The only programs that needed an upgrade were acrobat, safari, itunes, and skype. After I did the upgrades I restarted. When it restarted it gave some sort of windows startup file corruption message and I had to do a cold boot. Windows then went through a very long recovery process. When it was done, it kept coming up with a message saying that windows had blocked a startup item. I identified the blocked item as being the upgrade checker program. So, I have uninstalled the upgrade checker as well as the malwarebytes.
joe

[DanaO]

Well, I just had a blue screen crash. I'll try to start up in safe mode.

[DanaO]

Something is completely messed up! It would not start in safe mode and when it tried to come back up in normal mode I get an error message:
LogonUI.exe - Bad Image
C:\Windows\system32\auth.dll is either not designed to run on Windows or it contains an error...
Help!

[DanaO]

Well, the machine ended up doing a couple more startup recovery passes and seems to be working again... really strange.

[Machiavelli]

SFC Scan

• Click on the Start button and in the search box, type Command Prompt
• When you see Command Prompt on the list, right-click on it and select Run as administrator
• When command prompt opens, copy and paste the following commands into it, press enter after each
  
  sfc /scannow
  
  Wait for this to finish before you continue
  
  copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  
  
• This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

[DanaO]

I ran the sfc /scannow command. It got to 52% and the computer froze. The display is still there but the command line cursor stopped blinking, the %complete stopped at 52%, and the main cursor / pointer disappeared. I am going to have to cold boot again.
joe

[DanaO]

when I did the cold boot it would not start up again. I had to select "repair computer" and it is doing the startup repair again. If/when it starts again I'll try running the command in safe mode.

[DanaO]

In safe mode it got to 52% and then gave the following error message:
Windows Resource Protection could not perform the requested operation.

[DanaO]

the cbs.txt file is 13Mb which exceeds the attachment size limit so I have sent it to a compressed file which is attached.
joe

Attached Files

•  cbs.zip   548.94KB   105 downloads

[Machiavelli]

Hello DanaO,

for you it would be better opening a topic here. I'm not a specialist in fixing this kind of manifest corruptions etc.