« previous next »
Pages: 1 [2]   Go Down

Author Topic: 2 out 3 users ok  (Read 8322 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 2 out 3 users ok
« Reply #15 on: May 12, 2013, 09:20:30 PM »
OK are you able to get to safe mode with that account ?

If not could you run a fresh OTL log for me please again selecting all users
Logged

anndp

  • Guest
Re: 2 out 3 users ok
« Reply #16 on: May 12, 2013, 10:26:47 PM »
Can't get in using Safe Mode. The scan was much faster. Log attached.Ann
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 2 out 3 users ok
« Reply #17 on: May 12, 2013, 11:35:19 PM »
Hmm I cannot see that launch point

  • Download RogueKiller  and save it on your desktop.
     
    NOTE: If using IE8 or better Smartscreen Filter will need to be disabled

  • Quit all programs
  • Start RogueKiller.exe.
  • Wait until Prescan has finished ... 
  •     Click on Scan
   
 
  • Wait for the end of the scan. 
  • The report has been created on the desktop. 
  • Click on the Delete button.
     
  • The report has been created on the desktop.
  • Next click on the ShortcutsFix   

  • The report has been created on the desktop.
Please post:    All RKreport.txt text files located on your desktop.
Logged

anndp

  • Guest
Re: 2 out 3 users ok
« Reply #18 on: May 12, 2013, 11:40:30 PM »
Thank you so much for your time and patience. It's been a long day for me and still you're working on my problem. Now my brain hurts so I will carry on tomorrow. Thanks again Ann
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 2 out 3 users ok
« Reply #19 on: May 12, 2013, 11:44:54 PM »
No problem, nearly my bedtime now :)
Logged

anndp

  • Guest
Re: 2 out 3 users ok
« Reply #20 on: May 13, 2013, 08:42:52 PM »
I hope I've attached 3 reports.Ann
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 2 out 3 users ok
« Reply #21 on: May 13, 2013, 08:56:49 PM »
OK that is a new hiding place, could you see how the user account loads now please

Quote
[STARTUP][BLACKLISTDLL] msconfig.lnk @Rich.Dad : C:\Windows\System32\rundll32.exe|C:\PROGRA~3\bwgqe.dat,FG00 -> DELETED
Logged

anndp

  • Guest
Re: 2 out 3 users ok
« Reply #22 on: May 13, 2013, 09:16:01 PM »
Still the same I'm afraid. Ann
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 2 out 3 users ok
« Reply #23 on: May 13, 2013, 09:58:53 PM »
OK lets go hunting

For 32bit systems, please download SystemLook from one of the links below and save it to your Desktop.
 
Download Mirror #1
Download Mirror #2
 
For 64bit systems, download SystemLook from here.
 
 
  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
Code: [Select]
:filefind
59b0f739.exe
:regfind
59b0f739.exe
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

 
Note: The log can also be found on your Desktop entitled SystemLook.txt
Logged

anndp

  • Guest
Re: 2 out 3 users ok
« Reply #24 on: May 13, 2013, 10:04:04 PM »
sorry but I'm not sure which 32 or 64. How do I find out?
Logged

anndp

  • Guest
Re: 2 out 3 users ok
« Reply #25 on: May 13, 2013, 10:24:36 PM »
sorry I did say I wasn't good with computers but I've attached the report. Ann
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 2 out 3 users ok
« Reply #26 on: May 13, 2013, 11:18:05 PM »
Could you uninstall Rapport please as that is the only place where it is appearing
Logged

anndp

  • Guest
Re: 2 out 3 users ok
« Reply #27 on: May 13, 2013, 11:28:25 PM »
Done that. Ann
Logged

anndp

  • Guest
Re: 2 out 3 users ok
« Reply #28 on: May 14, 2013, 02:39:36 PM »
I tried to log in after deleting Rapport but it just showed the original problem still there.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 2 out 3 users ok
« Reply #29 on: May 14, 2013, 03:37:54 PM »
OK we will need to delete that login and create a new one... There is a step by step guide here from Microsoft.  http://windows.microsoft.com/en-gb/windows-vista/fix-a-corrupted-user-profile

The other alternative is for you to locate the bad users startup file and delete the offending exe from there.  But it would be easier just to create a new profile 
Logged
Pages: 1 [2]   Go Up
« previous next »