Solved How to change entries in the "System Configuration" window?

[jdb007]

Hi Jacee

Ok that's done and it has cleared out lots of junk (I took the precaution to create a Restore point beforehand - just in case)

Thanks for your input.

JDB007

 

[Slartybart]

jdb007: Where's the log, AdwCleaner .txt, Jacee asked you to post?

See: http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

 

[jdb007]

Here you go ...

View attachment AdwCleaner[R0].txt

View attachment AdwCleaner[R1].txt

View attachment AdwCleaner[R2].txt

View attachment AdwCleaner[S0].txt

View attachment AdwCleaner[S1].txt

I have cleaned the above from the system

Thanks

JDB007

 

[Slartybart]

JDB007: Thanks, they look good. Let's see if Jacee wants you to run additional scans.

Jacee: Thanks for reviewing the output and advising JDB007

 

[Jacee]

Please download (free version) Malwarebytes' Anti-Malware to your desktop
Malwarebytes : Malwarebytes Anti-Malware FREE
* Double-click mbam-setup.exe and follow the prompts to install the program.Right click to run as Administrator, using Windows 7 or Vista.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad. Please save it to a convenient location. Copy and Paste that log into your next reply.

 

[jdb007]

Jacee - Ok done see below. I am also going to run mbar-1.07.0.1009 to see if anything is still present

Thanks JDB007

View attachment mbam-log-2014-02-28 (16-25-46).txt

 

[Jacee]

Post the .txt log when finished.

 

[jdb007]

Jacee ..........

Log posted as requested and NO Malware found after running mbar-1.07.0.1009

Thanks

JDB007

 

[Slartybart]

Yes, it does look good. Any more scans Jacee?

When Jacee is satisfied that your system is disinfected, I'd like to know the status of the original issue in post# 1.

Please post a screenshot(s) of your msconfig startup tab after Jacee gives the all clear signal.

Thanks

Bill
.

 

[Jacee]

Couple more things to do jdb007...
Please download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.


After doing the above, I'd like you to scan your machine with ESET OnlineScan

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the
   
   button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   1. Click on
      
      to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the
      
      icon on your desktop.
4. Check
   
5. Click the
   
   button.
6. Accept any security warnings from your browser.
7. Check
   
8. Push the Start button.
9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
10. When the scan completes, push
    
11. Push
    
    , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
12. Push the
    
    button.
13. Push
    

 

[jdb007]

Ok all done.
(1) TFC found no problems
(2) ESET Ran clean - no problems

Checked the System Configuration and have added the screen shots below. The items that I think are still "suspect" have a RED cross appended. Some of these might be genuine but I don't have the knowledge to remove them ?

Thanks to you JACEE and SLARTYBART

 

[Slartybart]

Jacee might have more for you to do, while you wait for her response please follow this tutorial:
http://www.sevenforums.com/tutorials/92394-sf-diagnostic-tool-using-troubleshooting.html and attach the SF_DD_MM_YYYY folder to a new post on this thread.

Thanks

 

[jdb007]

Hi Slartybart, Ok done - see attached

JDB007

View attachment SF_02-03-2014.zip

 

[Slartybart]

Looking at the data you posted, I see two system profile users (both Network) that have sidebar.exe in startup.

I researched sidebar.exe and found a MS security advisory (2012, updated 2013) that says gadgets are a possible avenue for malware to gain access to your machine.

Microsoft Security Advisory (2719662): Vulnerabilities in Gadgets Could Allow Remote Code Execution

Please run

Microsoft Fix it 50906 (disable sidebar)​

in Microsoft Security Advisory: Vulnerabilities in Gadgets could allow remote code execution.

This is not directly related to the thread issue, but it is something that might cause other issues. Bookmark that page if you want to run Microsoft Fix it 50907 (enable sidebar) in the future.

The Windows error log also shows some issues that should be addressed.
Nvidia is crashing - you might need an updated driver
RADAR PRE LEAK is crashing - could be bad memory or a conflict.

Now about those entries in your screenshots.

Click Autoruns: Sysinternals Live Run on the download action bar. Autoruns should open on the "Everything" tab.

Carefully look at the objects on the list and untick any that match those in your screenshots. Exit Autoruns when you are finished and restart the machine.

Check that the startup tab reflects the changes you made in Autoruns.

Bill
.