WiredWX Hobby Weather ToolsLog in

 


ERROR-Starting on Demand Scanner

3 posters

descriptionERROR-Starting on Demand Scanner EmptyERROR-Starting on Demand Scanner

more_horiz
I have problems with my personal computer, My computer started getting slow, then I tried to run a scan with my McAffe but I could not do it, I just have the message:ERROR-Starting on Demand Scanner. Then I tried to run the Malwarebytes AntiMalware and I then start and then disappear from my screen. I follow your instructions about updating Java and run the HijackThis and it just disappear from my screen too. Could you please help me out, I do not know what else to do?

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
Hello, can you rename HijackThis to winlogon.exe and see if it runs.

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
The Hijackthis file was already named winlogon.exe. I wanted to unnistalled it but it did not work, neither rename it: I have a message as: Cannot copy winlogo acces is denied. Make sure the disk is not full or write-protected and that the file is not currently in use. Please, let me know what else I should do?

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz

  • Please download DDS by sUBs to your Desktop (Important!!) from one of these locations:
    Link 1
    Link 2
  • Double click DDS.scr to run.
  • When complete, two logs will open. Save both of the report to your Desktop.
  • Copy and paste DDS.txt back here, I don't need to see attach.txt.

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
I did download the DDS file, but every time that I click on it a screen opens and does not do anything. what else should I do now?

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
Hello.

  • Download combofix from here
    Link 1
    Link 2

    1. If you are using Firefox, make sure that your download settings are as follows:

    * Tools->Options->Main tab
    * Set to "Always ask me where to Save the files".

    2. During the download, rename Combofix to Combo-Fix as follows:

    ERROR-Starting on Demand Scanner CF_download_FF

    ERROR-Starting on Demand Scanner CF_download_rename

    3. It is important you rename Combofix during the download, but not after.
    4. Please do not rename Combofix to other names, but only to the one indicated.
    5. Close any open browsers.
    6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

  • We need to disable your local AV (Anti-virus) before running Combofix.
  • See HERE for how to disable your AV.
  • Double click on ComboFix.exe.
  • Follow the prompts. NOTE:
  • ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
    ***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***

    **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.


  • The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.

    ERROR-Starting on Demand Scanner Rcauto10

  • Allow ComboFix to download the Recovery Console.
  • Accept the End-User License Agreement.
  • The Recovery Console will be installed.
  • You will then get this next prompt that asks if you want to continue the malware scan, select yes

    ERROR-Starting on Demand Scanner Whatne10

  • Allow combofix to run
  • Post C:\combofix.txt back here.

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
Sorry, but this did not work neither. I followed all your instructions, I downloaded, change the name, I disable My antivirus. When I double click the combo-fix it opens the blue screen, start doing the scanner, complete until phase 50 and then my computer shuts down by itself. the first time shuted down by itself, when I wanted to run it again it send me a message saying that I need to disable my antivirus completly, which I did, start doing the scanner and shuted down by itself, saying something about an error. What should I do now?

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
Could you please tell me what else should I do? Please Help me t ofix my computer

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
BUMP

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
Hello.
I have not missed you, thanks for the bump. I was recently told about a new piece of malware and we believe you have it.

There isn't that much known about it. For now, lets try this.

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:

    Code:


    :filefind
    scecli.dll
    netlogon.dll


  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
SystemLook v1.0 by jpshortstuff (22.05.09)
Log created at 23:46 on 08/08/2009 by XP PRO (Administrator - Elevation successful)

========== filefind ==========

Searching for "scecli.dll"
C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\scecli.dll --a--- 181248 bytes [02:35 24/09/2008] [00:12 14/04/2008] A86BB5E61BF3E39B62AB4C7E7085A084
C:\WINDOWS\system32\scecli.dll --a--- 180224 bytes [05:56 04/08/2004] [05:56 04/08/2004] 0F78E27F563F2AAF74B91A49E2ABF19A

Searching for "netlogon.dll"
C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\netlogon.dll --a--- 407040 bytes [02:34 24/09/2008] [00:12 14/04/2008] 1B7F071C51B77C272875C3A23E1E4550
C:\WINDOWS\system32\netlogon.dll --a--- 60928 bytes [05:56 04/08/2004] [05:56 04/08/2004] (Unable to calculate MD5)

-=End Of File=-

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
Hello.

I'm back with new info, and now we can attack, I know what's up and how to stop it. Doing this fix will allow us to run stuff normally again, but you'll also need to uninstall and re-install Mcafee after, the virus has corrupted it.

1. Please download The Avenger by Swandog46 to your Desktop
Link: HERE or HERE.

  • Click on Avenger.zip to open the file
  • Extract avenger.exe to your desktop
2. Copy all the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+C):


Files to delete:
C:\WINDOWS\system32\netlogon.dll


Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.


3. Now, start The Avenger program by clicking on its icon on your desktop.

  • Under "Input script here:", paste in the script from the quote box above.
  • Leave the ticked box "Scan for rootkit" ticked.
  • Then tick "Disable any rootkits found"
  • Now click on the Execute to begin execution of the script.
  • Answer "Yes" twice when prompted.

    The Avenger will automatically do the following:

  • It will Restart your computer.
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
4. Please copy/paste the content of c:\avenger.txt into your reply.

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File "C:\WINDOWS\system32\netlogon.dll" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
Please download and run this tool.

Download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.


Post the contents of the MBAM Log.

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
Hi, me again.
See my Origins instructions will work, my source tells me it should now, that netlogon.dll was patched causing the problems.

descriptionERROR-Starting on Demand Scanner EmptyRe: ERROR-Starting on Demand Scanner

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum