New
#21
Brit, I will have to run it again, I think I deleted but I will see.
Won't that access my pc?
Brit, I will have to run it again, I think I deleted but I will see.
Won't that access my pc?
Nope, it is just a document of a special type. We can see the same info you see however.
Here's mine so you can see, just the msinfo.
Britton30.zip
There's a desktop.ini file for every folder - if you look closely enough :) It's created as soon as you vary any of the View settings in Windows Explorer.
The fact that there are two Default users present is odd - one of them should be named 'Default User' (note the 'User') and that one should be inaccessible, because it's only a hard link, rather than a real folder.
Likewise, the 'All Users' should be inaccessible for the same reason.
The Guest account isn't normally present unless at some time you've enabled the Guest account.
Looking at the logs, I can't see anything that jumps out at me. - but you cleared all the System Events on the 13th, so there's not a lot of history to go on.
There's one nasty error in the Application Events - lsm.exe stopped working on the 13th. This forced an immediate reboot. From what I can make out this may be caused by AV software.
Since you had a brush with lots of malware,
Please download and install Malwarebytes Anti-malware (free version) from http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM PRO' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in any other user accounts.
Delete everything it finds (such as???)
I didn't clear the logs. It may have been a program I ran? I used recuvia last night and brought them back. Then today I could not boot the pc. The pc did a restore of ? date, So now I am not sure if there still there. Going to find out.
I need to remove 3 Legacy drivers for MBAMSWISSARMY. Malwarebytes will only run for 3 minutes for a full scan. I have tried the permissions. We have these drivers on all three infected laptops, some have never had it installed. any ideas?
That is a driver for MalwareBytes. You can uninstall them and use the link below my sig to grab the latest version, free or paid which ever you have. For free there is a box to uncheck during unstall, "Start 30 day free trial"
I need to un-install them and I can't. I am ok with them after I reinstall. But something is wrong with these. Any ideas on how?
I just downloaded MB, it has expired certificates? I am running it. we will see. It flashed when starting and then had not responding. Everytime I get some headway on this pc it wont boot and suggest restore. I am not given a choice on what restore and then I am back to square one. I have hundreds of windows live in the registry. It no longer shows in the add/remove programs. I have lots of this type of things uninstalled and the reg is full but no way to remove except one by one. Is there a program I can use to help me delete them in the reg? I will let you know about MB.
I just downloaded MBAM from my link and installed/ran it. It showed no expired certs for me.
I think running CCleaner's Registry cleaner would get rid of the unneeded reg entries. Link down there too.