Author Topic: 3 files named control.exe and remove scorpian saver  (Read 14585 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 3 files named control.exe and remove scorpian saver
« Reply #15 on: January 11, 2014, 12:15:06 AM »
AswMBR is not needed and it does sometimes fail to run for no apparent reason, so it is not a problem

Quote
1. if I have other drives on my network, will they be infected with the same thing?
2. should I delete backups of the infected computer and make new backups?
3. why didn't the av and malware scans find this infection?

1.  Very unlikely
2.  It would be prudent to do that
3.  These are not viruses as such but potentially unwanted programmes.  New ones are released almost daily so it is hard to keep up.  Avast only checks for PUP's on a bootscan or unless specifically checked.  Putting the system to Hardened mode : Aggressive will block most of them


Have you run AdwCleaner yet ?


redboots

  • Guest
Re: 3 files named control.exe and remove scorpian saver
« Reply #16 on: January 11, 2014, 12:40:37 AM »
i am running it again, hope it does nt crash again.

redboots

  • Guest
Re: 3 files named control.exe and remove scorpian saver
« Reply #17 on: January 11, 2014, 01:00:56 AM »
it crashed again, at the same place...is there somewhere that a copy of the report sent to MS is on my computer so I can send you a copy of it.  There are 55 .dll listed, and a bunch of other stuff.

redboots

  • Guest
Re: 3 files named control.exe and remove scorpian saver
« Reply #18 on: January 11, 2014, 01:14:21 AM »
i am running chkdisk to see if there are errors
on the disk, and will try to run AswMBR.exe again.

redboots

  • Guest
Re: 3 files named control.exe and remove scorpian saver
« Reply #19 on: January 11, 2014, 02:12:53 AM »
i have tried to run AdwCleaner.exe at least 4 times.  i did the chkdsk, disconeccted from the internet, turned off avast and turned off avast service, but it would still crash at the same spot.

i saved the log file, but i see that it is empty.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 3 files named control.exe and remove scorpian saver
« Reply #20 on: January 11, 2014, 01:22:40 PM »
Is it AdwCleaner or AswMBR that is causing the crash ?  If AdwCleaner then replace it with this programme

Please download Junkware Removal Tool to your desktop.
  • Right-mouse click JRT.exe and select "Run as Administrator" the tool will open and start scanning your system
  • please be patient as this can take a while to complete depending on your system's specifications
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • post the contents of JRT.txt into your next message.

redboots

  • Guest
Re: 3 files named control.exe and remove scorpian saver
« Reply #21 on: January 11, 2014, 08:02:14 PM »
Ok, i am back.
sorry if i was confused as to which program i was to run.
here is AdwCleaner log and JRT.txt
i did not do anything with the scan from AdwCleaner

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 3 files named control.exe and remove scorpian saver
« Reply #22 on: January 11, 2014, 08:35:58 PM »
No problem, run AdwCleaner again, scan and then select clean

How is the computer behaving now ?

redboots

  • Guest
Re: 3 files named control.exe and remove scorpian saver
« Reply #23 on: January 11, 2014, 09:27:16 PM »
here is the report
the computer seems to be running ok....as it was prior to the PUP problem
scorpian saver still appears on the add/remove programs,
however it does not work to remove

redboots

  • Guest
Re: 3 files named control.exe and remove scorpian saver
« Reply #24 on: January 11, 2014, 09:37:49 PM »
i did find a file on the computer called 'tb.log'
that i think was part of the installation
that caused all the problems.
do you want me to send that to you?
your help and patience has been greatly appreciated,
and you've saved me a lot of time and headaches.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 3 files named control.exe and remove scorpian saver
« Reply #25 on: January 11, 2014, 09:41:07 PM »
Did you select clean for AdwCleaner ?

Lets remove the scorpion now. No need to re-run OTL scan 

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:Commands
[CREATERESTOREPOINT]

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{9B65F9A3-9D24-452A-B6EF-1457D65E4259}"=-

:Commands
[resethosts]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done

redboots

  • Guest
Re: 3 files named control.exe and remove scorpian saver
« Reply #26 on: January 11, 2014, 10:04:03 PM »
OTL report
scorpian saver still appears on the add/remove programs
« Last Edit: January 11, 2014, 10:06:04 PM by redboots »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 3 files named control.exe and remove scorpian saver
« Reply #27 on: January 11, 2014, 10:32:24 PM »
Could you try to uninstall via control panel now.. Does windows offer to remove the entry

redboots

  • Guest
Re: 3 files named control.exe and remove scorpian saver
« Reply #28 on: January 11, 2014, 10:36:02 PM »
yes , windows tries to uninstall, but it cannot find the reference files to do that.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: 3 files named control.exe and remove scorpian saver
« Reply #29 on: January 11, 2014, 10:38:31 PM »
Intriguing as the entry for it in the registry is no longer present

Could you run AdwCleaner one more time and select clean after the scan has completed