"MaAgent.exe - entry point not found" error message

Unfortunately, the postings of parts 1 and 2 of OTL.txt above seem to have been truncated as at the end of each part i put and this text hasn't appeared. I will have a look to see what text is missing. Thanks

ESET Online Scan

Please run a free online scan with the ESET Online Scanner

• Tick the box next to YES, I accept the Terms of Use
  
• Click Start
  
• When asked, allow the ActiveX control to install, or it will ask to download an installer. Please do so an install it.
  
• Click Start or wait for the scanner to load.
  
• Make sure that the options Remove found threats and the option Scan unwanted applications are checked.
  
• Click Scan (This scan can take several hours, so please be patient)
  
• Once the scan is completed, there are a couple of things to keep in mind:
  
• 1. If NO threats were found, allow the scanner to Uninstall on close and then close the Window.
  
• 2. If threats WERE detected, click on List of Threats Found, Export to Text File...save it as ESET-Scan-Log.txt. Click the back button/link, put a checkmark to Uninstall Application on Close and then close the window.
  
• Open the logfile from wherever you saved it
  
• Copy and paste the contents in your next reply.
  

Any more issues?

We need to know any other issues that are plaguing your computer. Kindly give a summary so we know how to continue from here.

Many of the things to note for us would be:

• Slow computer
  
• Error messages
  
• Fake antivirus alerts or the icon in the system tray
  
• svchost.exe running at 100%
  
• System crashes or blue screen of death
  

Hi, Thanks for your reply. I ran the 'ESET Online Scanner' previously before running the OTL.exe and posted the log text above. Did you want me to do it again? Also, all the OTL.txt report text did come through in my postings (in three parts) above. At the end of each part i put < End of Part X > but this text didn't display possibly because i didn't put a space after "<" and before ">".

Many thanks!

That's okay.

If you still have the McAfee error you described, then we will take care of that. Let me know if the error continues...

I still have the error message "MaAgent.exe - entry point not found" when re-starting the computer. I don't know of a McAfee error though? Is it the same thing? Thanks

This isn't the same file as in McAfee's programs, my bad.

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
  
• Copy the content of the following codebox into the main textfield:
  

  
  :filefind
  MaAgent.exe
  
  :regfind
  maagent

  
  
  
• Click the Look button to start the scan.
  
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
  

Note: The log can also be found on your Desktop entitled SystemLook.txt

Thanks. here is the SystemLook.txt log file :
SystemLook 30.07.11 by jpshortstuff
Log created at 07:41 on 15/10/2012 by Maradona
Administrator - Elevation successful

========== filefind ==========

Searching for "MaAgent.exe"
C:\Program Files (x86)\MarkAny\ContentSafer\MaAgent.exe --a---- 61440 bytes [09:07 11/07/2012] [04:02 26/06/2012] 5D2844770B902B21A627E4E2A98A2843

========== regfind ==========

Searching for "maagent"
[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\Internet]
"UseRWHlinkNavigation"="http://www.GeekPolice.net/t29111p15-maagentexe-entry-point-not-found-error-message#202923"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\93098AC90CB9B9D9E0B7DAF98117ABD6]
"1038C85769625584FA5435B4210089A0"="C?\Users\MARK&B~1\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"MAAgent"="C:\Program Files (x86)\MarkAny\ContentSafer\MAAgent.exe"
[HKEY_USERS\S-1-5-21-2559859767-1011662522-2398477756-1001\Software\Microsoft\Office\14.0\Common\Internet]
"UseRWHlinkNavigation"="http://www.GeekPolice.net/t29111p15-maagentexe-entry-point-not-found-error-message#202923"

-= EOF =-

Please go to Start > Control Panel > Programs and remove the following (if present):

• MarkAny
  
• ContentSafer
  

That should rid the MaAgent.exe errors...

Thanks. The programs MarkAny, ContentSafer weren't listed under Programs so wasn't able to remove them.

Please run OTL

• Under the Custom Scans/Fixes box at the bottom, copy and paste in the following:
  
  

  :files
  C:\Users\MARK&B~1\AppData\Local\Temp\MarkAny
  C:\Program Files (x86)\MarkAny
  
  :reg
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  "MAAgent"=-
  
  :commands
  [emptytemp]
  [reboot]

  
  
  
• Then click the Run Fix button at the top.
  
• Note: The fix for OTL automatically hides your Desktop and Start menu so the fix can be completed. Do not be alerted, as this is normal.
  
• Please do not exit the program. It might take a while to fix, but allow it to run. If it asks to reboot the computer, allow it to reboot. If the program freezes, and the computer fails to reboot - let me know.
  Lastly, post the contents of the log. (Located at C:\_OTL\Moved Files)

Thanks for your help. The error message did not appear on re-booting. The OTL log:

All processes killed
========== FILES ==========
File\Folder C:\Users\MARK&B~1\AppData\Local\Temp\MarkAny not found.
C:\Program Files (x86)\MarkAny\ContentSafer\UpdateClient folder moved successfully.
C:\Program Files (x86)\MarkAny\ContentSafer\Data folder moved successfully.
C:\Program Files (x86)\MarkAny\ContentSafer folder moved successfully.
C:\Program Files (x86)\MarkAny folder moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\MAAgent deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56504 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Maradona
->Temp folder emptied: 2451317 bytes
->Temporary Internet Files folder emptied: 468269641 bytes
->Java cache emptied: 726032 bytes
->FireFox cache emptied: 1098857934 bytes
->Google Chrome cache emptied: 8797913 bytes
->Flash cache emptied: 15275160 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 20142 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50400 bytes
RecycleBin emptied: 7072651 bytes

Total Files Cleaned = 1,527.00 mb


OTL by OldTimer - Version 3.2.70.2 log created on 10172012_184716

Files\Folders moved on Reboot...
C:\Users\Maradona\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Excellent!

If it all appears to be good then, we will finish up to make sure your computer is protected from malware in the future.

Clean up System Restore

Now, to get you off to a clean start, we will be creating a new Restore Point, then clearing the old ones to make sure you do not get reinfected, in case you need to "restore back."

To manually create a new Restore Point

• Go to Control Panel and select System and Maintenance
  
• Select System
  
• On the left select Advance System Settings and accept the warning if you get one
  
• Select System Protection Tab
  
• Select Create at the bottom
  
• Type in a name I.e. Clean
  
• Select Create
  

Now we can purge the infected ones

• Go back to the System and Maintenance page
  
• Select Performance Information and Tools
  
• On the left select Open Disk Cleanup
  
• Select Files from all users and accept the warning if you get one
  
• In the drop down box select your main drive I.e. C
  
• For a few moments the system will make some calculations:
  
  
• Select the More Options tab
  
  
• In the System Restore and Shadow Backups select Clean up
  
  
• Select Delete on the pop up
  
• Select OK
  
• Select Delete
  

Run OTC to remove our tools

To remove all of the tools we used and the files and folders they created, please do the following:
Please download OTC.exe by OldTimer:

• Save it to your Desktop.
  
• Double click OTC.exe.
  
• Click the CleanUp! button.
  
• If you are prompted to Reboot during the cleanup, select Yes.
  
• The tool will delete itself once it finishes.
  

Note:If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.

Purge old temporary files

Download CCleaner Slim and save it to your Desktop - Alternate download link

When the file has been saved, go to your Desktop and double-click on ccsetupxxx_slim.exe
Follow the prompts to install the program.

* Double-click the CCleaner shortcut on the desktop to start the program.
* Click on the Options block on the left, then choose Cookies.
* Under Cookies to Delete, highlight any cookies you would like to retain permanently
* Click the right arrow > to move them to the Cookies to Keep window.
* Go into Options > Advanced & uncheck Only delete files in Windows Temp folders older than 48 hours
* Click Cleaner on the left then Run Cleaner on the right to run the program.
* Important: Make sure that ALL browser windows are closed before selecting Run Cleaner

Caution: Only use the Registry feature if you are very familiar with the registry.
Always back up your registry before making any changes. Exit CCleaner after it has completed it's process.

Security Check

Please download Security Check by screen317 from SpywareInfoforum.org or Changelog.fr.

• Save it to your Desktop.
  
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Hi, Thanks very much again for your help. The checkup Notepad was empty - there was no text...

Try to re-run it, see if it works out, please...

Same again. No text in the Checkup.txt file. When the Security Check was running it repeatedly displayed: "The system cannot find the path specified." Thanks.

Personal Tips on Preventing Malware

See this page for more info about malware and prevention.


Any other questions before I mark this topic solved?

No other questions at this stage, thanks. Everything seems to be fine. Thank you !!!

Great. Topic marked solved.