New
#21
albanello,
My apology for the delay!
Do not see malware on the FRST reports.
Please run RogueKiller. It targets some other areas.
Thanks!
albanello,
My apology for the delay!
Do not see malware on the FRST reports.
Please run RogueKiller. It targets some other areas.
Thanks!
cottonball
No problem I appreciate you taking the time to take me through this Malware search/cleanup.
RKreport.txt [Mode Scan]
Attached please find "RKreport_SCN_01122015_084916.log" the report generated as a result of running "RogueKillerX64.exe"
This is not the report you requested. I did not see "RKreport.txt" on my desktop. The report attached is the result of me clicking the "Report" button, in "RogueKillerX64" control panel, and saving the text file displayed to my desktop.
- Did I download the correct RogueKillerX64.exe file ?
- Is this the report you are looking for ?
Thanks again
albanello
cottonball
I hope everything is ok with you.
Did you get my last post? I sent it a couple days ago. I ran "RogueKiller" as you requested but it did not generate the text file you requested but I did send the one it created.
Hope to here from you soon.
Thanks for your help.
albanello
I have run "RogueKiller" to check for Malware on my computer. Is there someone that can look at the file created as a result of running "RogueKiller" that can tell me what my next step is.
The files are attached to my post #22.
Help would be appreciated.
Thank You
albanello
The RogueKiller log only shows a few things that are normal. If you look at the file, you'll see that they are all classified as PUMs - Potentially Unwanted Modifications. Malware often changes some things, but the user can too.
RogueKiller and other scanners don't know who made the modification and reports them so you can say "I made that change, it's OK"
There are some IE mods that are ok, you use EarthLink so the home page ok. RogueKiller just made a note of it.Internet Explorer\Main | Start Page : EarthLink - Welcome to myEarthLink -> FoundSome Explorer mods, you don't show games on your start menu (maybe it means that you DO show games). The 0 is either True or False (it's been a while since my programming days)
Internet Explorer\Main | Start Page : EarthLink - Welcome to myEarthLink -> FoundExplorer\Advanced | Start_ShowMyGames : 0 -> FoundThese mods concern desktop icons - you have changed preferences I presume
Explorer\Advanced | Start_ShowMyGames : 0 -> FoundExplorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FoundThe rest are 0 found and the MBR was checked - it looks fine.
Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found
Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found
Next Step - none that I can think of. Cottonball (CB) might have more, but I think your machine is in good shape
I'll give CB a shout, she might have missed your post. For now, things look good.
Bill
I only jump in and out of this thread to support the efforts of other members. Since my focus iwas on answering one post, I forgot to ask about the original issue.
Start Button shortcuts not working
What's the status - are they working now? If they're not, then more investigation and suggestions are required.
Bill
.
Slartybart
Post #17 was a thank you to you for suggesting "Downloading lnk - Shortcut link (LNK) file" that fixed the shortcut problem. Thanks again.
The only reason I did a shout out to somebody else is because cottonball was not responding to my posts. I figured they were on vacation or to busy at work or something. I just wanted to get the "RogueKiller" scan for Malware done.
As I am understanding you relative to the RogueKiller" scan everything looks OK so I don't need to do anything with respect to the items listed in the "RogueKiller" log. It just looked strange to me the each item listed was listed twice. I just thought at the very least there may be some cleanup required........deleting the duplicate.
Thanks for jumping in.
albanello
Thanks, I didn't go back and check
- figured you'd know if the original problem was fixed right off the top of your head :)
Yeah, sometimes people get busy and someone else jumps in to help.
Yesy - CB confirmed the FABAR was clean and requested that you run RogueKiller (RK) to double check. Since I am subscribed to your thread, I saw that CB hadn't noticed your updates and took a look at the RK log. I'm not sure why the log shows more than one entry for Homepage and ShowMyGames, but suspect that there is more than one place RK checked.
There is more than one item modified for HideDesktopIcons - more than one icon is not shown on your desktop.
Right click an open area of your desktop
Select Personalize
Select Change Desktop Icons
Any that are not selected (not ticked) would be reported as a PUM - HideDesktopIcons
Bottom line - your machine is clean, both FRST and RK report no threats.
Bill
.
When you get the chance, please mark your thread as solved
if you are satisfied that it is solved, that is :)
Thanks
albanello,
Slartybart is right on point with the FRST and the RK report.
They are not showing malware.
The duplicates may be an RK glitch. I would not worry about them.