Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Persistant virus?

14 Oct 2013   #21
Devlin1888

Windows 7 Home Premium 64Bit
 
 

I have a process in the task manager call LMworker.exe some people say this is a virus, is it possible that this could be the thing thats making my cpu go from 30-50% but hides itself when i open task manager?


My System SpecsSystem Spec
.
14 Oct 2013   #22
AmericanPharaoh

Windows 7 Home Premium 64-bit
 
 

Here's what the knowledge base shows for this entry.

LMworker.exe Windows process - What is it?

Still waiting on the other log.

So far, the tools are working, but more will need to be ran.

John
My System SpecsSystem Spec
15 Oct 2013   #23
UsernameIssues

W7 Pro SP1 64bit
 
 

@Devlin1888,
You can make your life easier by simply attaching the log/txt files to your post. You do not have to copy/paste the info in to the body of your reply. As you have seen, you can only post just so much info into one post... so you have to make post after post to get the info to those helping you.

I re-read post #3 and maybe I'm wrong... maybe Britton30 wanted the info in the body of the posts and not as attachments. I'll let Britton30 clarify that later. But here is the tutorial on how to attach a file or image to a post:
Screenshots and Files - Upload and Post in Seven Forums


Hopefully, johnsmith45jock won't mind scan results/info as text based attachments.


:::goes back to lurking:::
My System SpecsSystem Spec
.

15 Oct 2013   #24
Devlin1888

Windows 7 Home Premium 64Bit
 
 

Yeah cheers, i just read on here somewhere that most people prefer them to be in the body of the text, im happy to upload them as files if needed. Cheers again, il do the other scan just now
My System SpecsSystem Spec
15 Oct 2013   #25
Devlin1888

Windows 7 Home Premium 64Bit
 
 

Quote   Quote: Originally Posted by Layback Bear View Post
That list of trash has got to be a record of some kind. That is the longest list of trash
found by AdwCleaner I have ever seen from one computer at one time.
One must be more careful what one downloads and methods used.
Is there some sort of medal for this?XD just kidding
My System SpecsSystem Spec
15 Oct 2013   #26
AmericanPharaoh

Windows 7 Home Premium 64-bit
 
 

Quote   Quote: Originally Posted by Devlin1888 View Post
Quote   Quote: Originally Posted by Layback Bear View Post
That list of trash has got to be a record of some kind. That is the longest list of trash
found by AdwCleaner I have ever seen from one computer at one time.
One must be more careful what one downloads and methods used.
Is there some sort of medal for this?XD just kidding
Yeah, most infected PC award!
My System SpecsSystem Spec
15 Oct 2013   #27
Devlin1888

Windows 7 Home Premium 64Bit
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.4 (10.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by Michael on 15/10/2013 at 6:13:09.80
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1000511198-54521286-2006776693-1000\Software\SweetIM
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550255185504}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660266186604}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440244184404}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550255185504}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660266186604}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440244184404}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550255185504}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660266186604}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440244184404}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110211181104}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110211181104}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181104}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211181104}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550255185504}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660266186604}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440244184404}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{449F3DA4-0324-45DC-A417-DE00B2448990}



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\sho2DEE.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho4F84.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho837.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho8C8E.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoF8F7.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Michael\appdata\local\adawarebp"
Successfully deleted: [Folder] "C:\Users\Michael\appdata\local\cre"
Successfully deleted: [Empty Folder] C:\Users\Michael\appdata\local\{86F88D9B-6274-4980-BA8A-5EE58ACB4B02}
Successfully deleted: [Empty Folder] C:\Users\Michael\appdata\local\{8D778443-1350-473B-97D9-37787916DE3A}
Successfully deleted: [Empty Folder] C:\Users\Michael\appdata\local\{A4CDCC98-D4AF-4F9C-8C6F-7EB29105388E}
Successfully deleted: [Empty Folder] C:\Users\Michael\appdata\local\{CD095CB6-297E-4327-8326-5CEF3A465869}



~~~ FireFox

Emptied folder: C:\Users\Michael\AppData\Roaming\mozilla\firefox\profiles\7qs3y9qi.default\minidumps [9 files]



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Michael\appdata\local\Google\Chrome\User Data\Default\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\jneaojaoiajhnemidnjhoempalnidbhj



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15/10/2013 at 6:20:49.41
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
My System SpecsSystem Spec
15 Oct 2013   #28
Devlin1888

Windows 7 Home Premium 64Bit
 
 

Not sure how much of they files were harmful though! Probably most of them, you guys are great here!
Would deleting the LMworker cause windows to become disfunctional?
My System SpecsSystem Spec
15 Oct 2013   #29
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

From you post #25.
Is there some sort of medal for this?XD just kidding


It was kind of a reminder that after these good folks help you get your computer clean if you do the same things in the same way you will just get infected again. I hate to have the work you and the members helping you go to waste by just getting infected again a week from now.

Being careful of what one ticks on and all the extra goodies that might come with that one tick.

Using torrents is one of the best way I know of to get infected.

Now I will get out of the way and let these good folks continue to help you.
My System SpecsSystem Spec
15 Oct 2013   #30
Devlin1888

Windows 7 Home Premium 64Bit
 
 

Yeah it wont happen again, never happened to me in my computing history, maybe the odd virus here and there but nothing like this,
Yeah i will admit to using torrents but i do usually pay for the stuff if i enjoy them, Torrents arent where these came from i am good at monitoring what i download from a particular torrent site, but yeah these guys here deserve alot of credit! Thanks again!
My System SpecsSystem Spec
Reply

 Persistant virus?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Having a persistant issue with picture thumbnails
I have visited many forums and I have tried multiple solutions but none have worked. my pictures are not showing a thumbnail preview. I have checked boxes in the system advanced settings, and in the folder options. I cannot figure this out. and before anyone asks, yes I have tried changing...
Music, Pictures & Video
Persistant bootmgr problems
Hi all I am currently having some very frustrating issues with the Windows 7 installation on my new PC, I cannot seem Windows to boot from my SSD (where my fresh windows installation is). I have done a fair amount of reading on the topic and it seems alot af people get this problem but none of...
Installation & Setup
Persistant BSOD for almost a year !
Hi folks, - x86 (32-bit) - retail version - Hardware from 2007 - Age of current OS installation - ca. 2 weeks Please help, this is doing my head in! Brief History Machine started Bluescreening after a new mobo was fitted whilst running Vista. I couldn't get it
BSOD Help and Support
Persistant BSOD's
I bought my laptop back in March and it ran fine until last month. I made no particular changes, but one day it suddenly began to crash often, especially while playing games. I took it back to the shop and after two weeks they said there was nothing wrong at all. After a few days, the BSOD's...
BSOD Help and Support
Persistant BSODs
I am trying to fix a custom built pc, about 7 months old. It has been suffering very persistent BSODs over the past few months (say, 4). Windows 7 Ultimate x64 Original and first installation of W7 Its a full retail version The hardware is about 7 months old, the OS installation too. ...
BSOD Help and Support
Persistant STOP: 124 Error
Hi built the family a new rig recently however i seem to be suffering a spate of STOP: 0X00000124 Hardware errors and can not find a way to stop them even after many driver changes. The problem usualy manifests itself during 3D gaming (however it has happened when playing Zynga Poker on FaceBook)....
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:40.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App