A few questions

[miaowable]

Hi, I'm new here and not very knowledgable about the finer aspects of PC's and I didn't want to make 2 topics about this.

I have Windows 7 Home Premium on my Toshiba Satellite L500, which came preloaded and with no OS disk that I know of. I have my sticker still intact on bottom of laptop and I want to know how to make or get, without buying, a disc that I can use to format my PC.

Also, I have Malwarebytes Anti Malware with the protection module on and it keeps blocking wininit.exe and winlogon.exe from accessing external IP addresses. Is it normal for these processes to access external IP's?

Thanks

 

[JaidynM]

Hi miaowable,
Brink (an admin on this site) made a tutorial for such a problem.

http://www.sevenforums.com/tutorials/2083-system-repair-disc-create.html

Hope it helps.

 

[miaowable]

That's really useful, thanks.

 

[JaidynM]

No problem.

 

[miaowable]

Can anyone answer my other question please?

 

[essenbe]

They are both legitimate Windows system files. However some viruses report themseves as those names. that is only a possibility. I would suggest you run a full scan with malwarebytes. Depending on what the results of that scan shows, open an elevated command prompt (click start-type cmd-right click and select run as administrator) copy and paste this into the window sfc /scannow That will take a few minutes to run. Let us know the results of both the scan and the scannow. The scannow is a system file checker to check the integrity if system files.

 

[miaowable]

Scan Results


I haven't rebooted since then.

The Malwarebytes scan found
Memory Processes Infected: 2
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 4
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 21
And said it had fixed them all when I told it to fix them. wininit.exe or winlogon.exe were not amongst them. Is it normal for them to attempt to reach external IP's?

 

[essenbe]

It is not normal as far as I know. There is a reason malwarebytes is blocking them. If it was normal it wouldn't block them. The problem with viruses is that you can remove them but you cannot repair the damage they have done to other files. I would run malwarebytes again and remove anything it finds. Keep running it until it finds nothing. Then run scannow. Do you have data backups of your personal files and folders? If you do, have the AV scan them also.

To be honest, if it were my computer, I would completely clean the hard drive and reinstall windows. I know that is not what you want to hear but it is the safest way. Viruses can, and apparently have, imbed themselves in other files and folders.