WiredWX Christian Hobby Weather Tools
Would you like to react to this message? Create an account in a few clicks or log in to continue.

WiredWX Christian Hobby Weather ToolsLog in

 


OTL and Extra - pasted and attached

2 posters

descriptionOTL and Extra - pasted and attached - Page 2 EmptyRe: OTL and Extra - pasted and attached

more_horiz
At CMD /K SC QC WSCSVC, OpenService FAILED 1060 appears. The specified service does not exist as an installed service.

descriptionOTL and Extra - pasted and attached - Page 2 EmptyRe: OTL and Extra - pasted and attached

more_horiz
It is usual for us to only allow one topic per person at a time. Otherwise, it gets seriously confusing. Goofy

ComboFix

Please download ComboFixOTL and Extra - pasted and attached - Page 2 Combofix by sUBs
From BleepingComputer.com

Please save the file to your Desktop, but rename it first to svchost.exe

Important information about ComboFix

Before the download:

  • Please copy and paste these instructions to Notepad and save to your Desktop, or print them - for easier access.
  • It is important to rename ComboFix before the download.
  • Please do not rename ComboFix to other names, but only the one indicated.

After the download:

  • Close any open browsers.
  • Very Important: Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results". Please visit here if you don't know how.
  • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
  • Please do not attempt to re-connect your machine back to the Internet until ComboFix has completely finished.
  • If there is no Internet connection after running ComboFix, then restart your computer to restore back your connection.

Running ComboFix:

  • Double click on svchost.exe & follow the prompts.
  • It will attempt to install the Recovery Console:


  • When ComboFix finishes, it will produce a report for you.
  • Please post the "C:\Combo-Fix.txt" in your next reply.

Troubleshooting ComboFix

Safe Mode:

If you still cannot get ComboFix to run, try booting into Safe Mode, and run it there.

(To boot into Safe Mode, tap F8 after BIOS, and just before the Windows
logo appears. A list of options will appear, select "Safe Mode.")

Re-downloading:

If this doesn't work either, try the same method (above method), but try to download it again, except name
ComboFix.exe to iexplore.exe, explorer.exe, or winlogon.exe.

Malware is known for blocking all "user" processes, except for its whitelist of system important processes such as iexplore.exe, explorer.exe, winlogon.exe.


NOTE: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.

descriptionOTL and Extra - pasted and attached - Page 2 EmptyRe: OTL and Extra - pasted and attached

more_horiz
Thanks for your help, but as it's been 2 weeks since my pc got infected I couldn't keep working at it at that pace, so I took it to the shop that built it today.

descriptionOTL and Extra - pasted and attached - Page 2 EmptyRe: OTL and Extra - pasted and attached

more_horiz
By the way...if someone posts asking whether or not they should be connected to the internet or should reconnect if they've disconnected, you really need to let them know. Just mho.

descriptionOTL and Extra - pasted and attached - Page 2 EmptyRe: OTL and Extra - pasted and attached

more_horiz
Most of the time, when you have originally detected the malware issue, it means the computer is infected by malware of some sort. Antivirus scanners may not show a sign of the malware still being there, which could be a sign of a rootkit.

Whenever rootkit scanners, and antivirus software scan for the rootkit, it gets as close to the system kernel as possible. If the rootkit is beyond that point, it will not be detected.

So, the idea is, is when you post to a forum that you need help removing malware, it is best to stay with the helper, to ensure your computer is clean.

However, we all face issues helping our victims out. Because of being volunteers, we have to succumb to the demand of many victims of malware, not just one of two at a time.

For myself, I have a workrate of 30-40 victims per day that I assist. In that case, it is only best to keep things less confusing. Maintaining a level of professionalism is important on both sides of the spectrum, and we do our best to try to seek out the best answers.

All of the info posted is to help reveal malware entry points so we can find and target the malware. Sometimes logs cannot properly help diagnose the issue. Eventually, malware finds ways to get around our scanners.

If we did not use our scanners, and instead used third party products, we could not get enough info to make sure we can help to defeat the issue. So, these scanners are engineered by our staff, and corresponding staff to help bypass malware, and fully detect it.

Our wish would be that if you'd like help in the future, you would keep some of these principles in mind.

Since you have requested no more help, this topic is now closed.

descriptionOTL and Extra - pasted and attached - Page 2 EmptyRe: OTL and Extra - pasted and attached

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum