OTL and Extra - pasted and attached

Page 2 of 2 Previous  1, 2

View previous topic View next topic Go down

Re: OTL and Extra - pasted and attached

Post by etrdave on Sat Sep 15, 2012 1:49 pm

At CMD /K SC QC WSCSVC, OpenService FAILED 1060 appears. The specified service does not exist as an installed service.

etrdave
Novice
Novice

Posts Posts : 40
Joined Joined : 2012-09-01
OS OS : xp home edition 2002 sp3
Points Points : 16115
# Likes # Likes : 0

View user profile

Back to top Go down

Re: OTL and Extra - pasted and attached

Post by Dr Jay on Sat Sep 15, 2012 6:30 pm

It is usual for us to only allow one topic per person at a time. Otherwise, it gets seriously confusing. Goofy

ComboFix

Please download ComboFix by sUBs
[You must be registered and logged in to see this link.]

Please save the file to your Desktop, but rename it first to svchost.exe

Important information about ComboFix

Before the download:

  • Please copy and paste these instructions to Notepad and save to your Desktop, or print them - for easier access.
  • It is important to rename ComboFix before the download.
  • Please do not rename ComboFix to other names, but only the one indicated.

After the download:

  • Close any open browsers.
  • Very Important: Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results". [You must be registered and logged in to see this link.] if you don't know how.
  • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
  • Please do not attempt to re-connect your machine back to the Internet until ComboFix has completely finished.
  • If there is no Internet connection after running ComboFix, then restart your computer to restore back your connection.

Running ComboFix:

  • Double click on svchost.exe & follow the prompts.
  • It will attempt to install the Recovery Console:


  • When ComboFix finishes, it will produce a report for you.
  • Please post the "C:\Combo-Fix.txt" in your next reply.

Troubleshooting ComboFix

Safe Mode:

If you still cannot get ComboFix to run, try booting into Safe Mode, and run it there.

(To boot into Safe Mode, tap F8 after BIOS, and just before the Windows
logo appears. A list of options will appear, select "Safe Mode.")

Re-downloading:

If this doesn't work either, try the same method (above method), but try to download it again, except name
ComboFix.exe to iexplore.exe, explorer.exe, or winlogon.exe.

Malware is known for blocking all "user" processes, except for its whitelist of system important processes such as iexplore.exe, explorer.exe, winlogon.exe.


NOTE: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 13713
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Protection Protection : Bitdefender Total Security
Points Points : 302069
# Likes # Likes : 10

View user profile

Back to top Go down

Re: OTL and Extra - pasted and attached

Post by etrdave on Sun Sep 16, 2012 1:52 am

Thanks for your help, but as it's been 2 weeks since my pc got infected I couldn't keep working at it at that pace, so I took it to the shop that built it today.

etrdave
Novice
Novice

Posts Posts : 40
Joined Joined : 2012-09-01
OS OS : xp home edition 2002 sp3
Points Points : 16115
# Likes # Likes : 0

View user profile

Back to top Go down

Re: OTL and Extra - pasted and attached

Post by etrdave on Sun Sep 16, 2012 1:56 am

By the way...if someone posts asking whether or not they should be connected to the internet or should reconnect if they've disconnected, you really need to let them know. Just mho.

etrdave
Novice
Novice

Posts Posts : 40
Joined Joined : 2012-09-01
OS OS : xp home edition 2002 sp3
Points Points : 16115
# Likes # Likes : 0

View user profile

Back to top Go down

Re: OTL and Extra - pasted and attached

Post by Dr Jay on Sun Sep 16, 2012 10:00 am

Most of the time, when you have originally detected the malware issue, it means the computer is infected by malware of some sort. Antivirus scanners may not show a sign of the malware still being there, which could be a sign of a rootkit.

Whenever rootkit scanners, and antivirus software scan for the rootkit, it gets as close to the system kernel as possible. If the rootkit is beyond that point, it will not be detected.

So, the idea is, is when you post to a forum that you need help removing malware, it is best to stay with the helper, to ensure your computer is clean.

However, we all face issues helping our victims out. Because of being volunteers, we have to succumb to the demand of many victims of malware, not just one of two at a time.

For myself, I have a workrate of 30-40 victims per day that I assist. In that case, it is only best to keep things less confusing. Maintaining a level of professionalism is important on both sides of the spectrum, and we do our best to try to seek out the best answers.

All of the info posted is to help reveal malware entry points so we can find and target the malware. Sometimes logs cannot properly help diagnose the issue. Eventually, malware finds ways to get around our scanners.

If we did not use our scanners, and instead used third party products, we could not get enough info to make sure we can help to defeat the issue. So, these scanners are engineered by our staff, and corresponding staff to help bypass malware, and fully detect it.

Our wish would be that if you'd like help in the future, you would keep some of these principles in mind.

Since you have requested no more help, this topic is now closed.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 13713
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Protection Protection : Bitdefender Total Security
Points Points : 302069
# Likes # Likes : 10

View user profile

Back to top Go down

Page 2 of 2 Previous  1, 2

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum