Windows logon ui...

[UserNam]

I'm not sure if I'm posting this in the right thread so feel free to move it if I'm wrong.
I was hit with quite a lot of viruses, most of them were removed with Microsoft defender, and I still had one nasty virus/rootkt? so I used avz to remove it. Now I have a whole lot slower startups, 3 minutes to power to welcome, 2 minutes for welcome, and sometimes when logon ui doesn't crash 5 minutes to start explorer. when I try the cd and the repair computer it just loads up to the background image. my pc starts and after the long wait everything is a breeze, even logging out and back in. I tried sfc, that only repaired windows explorer, which now make the error show and then no more waiting 5minutes for it to load, but I'm still mad of waiting twenty minutes for the stupid thing. My specs are high. 7.1 rating, if it weren't for the hard drive (5.9), and this wasn't a problem before the viruses. Now what?

 

[d00p98uy]

how are things in safe mode?

 

[AmericanPharaoh]

Update the definitions of your anti-virus and run a complete scan of your hard drive in Safe Mode.

Download, update, run a scan with SuperAntiVirus. Remove anything it finds. You may be required to reboot to finish cleaning.

Download, update, run a scan with Malwarebytes. Remove anything it finds.

Let us know if it gets any better afterwards.

 

[UserNam]

I'm kind sure there aren't any viruses left, I used avz with max settings scanning everything for 5 hours. It did remove a virus. Safe mode is fine, 30 seconds longer only.

 

[d00p98uy]

boot into safe mode with networking, then run MalwareBytes Anti-Malware (MBAM) from my signature below. Update MBAM and do a full scan with it.

 

[UserNam]

Okay.

 

[AmericanPharaoh]

Check add/remove programs for anything odd which installed in the last few days, such as, toolbars, etc. Remove, but if not sure we may need a screen shot. If you click on the area "Installed on" this will bring the most current to the top of the list if it is not already that way.

Look in Program Files (x86) for traces of odd listings, click on "date modified" will bring the most current to the top of the list. Don't delete anything if your not sure.

Msconfig start tab, may show you even more stuff which should not be there. If not sure, just Google the entries, one by one, to see what they are.

 

[d00p98uy]

johnsmith, when giving Instructions, please make sure they are clear, some users are not very advanced and may not even know where Program Files (x86) are and how to get to msconfig. Also, I always recomend a screenshot so we know what we're dealing with and they're not just trying to uninstall something and make matter worse. I am glad you are trying to help out, but try to be a little more clear

So, as john was saying, while MalwareBytes is scanning, open up msconfig by opening your start orb, typing msconfig, and pressing enter. Click the Startup tab and post a screenshot using the built in Snipping Tool (it's the same instructions as in 7, so don't worry)
Also, provide a screenshot of your program list from uninstall/remove Programs.

Also, download the correct bit version of FRST and and save it to your Desktop. Click scan. Two text documents will appear on your desktop, upload them (Addition.txt and FRST.txt)

BTW: what is avz?
--Brad

 

[AmericanPharaoh]

RedFang337, I'm a bit out of practice. It's been quite awhile since I did any forum help. I'll try to pay closer attention to detail when giving directions, as you suggested.

For myself only, I usually edit the registry to remove most Malware and Spyware. But, will certainly not recommend doing this for members needing help.

Instead, the usual process is to run multiple scanners, copy and paste logs for review. Use Command prompt to edit, remove or modify. Or something like that.

Anyway, you take the lead on this. I'll offer a suggestion if I think of something more.

 

[d00p98uy]

no worries John, we appreciate all help on the forums, now OT and wait for UserNam to respond

 

[UserNam]

I understand john find, I already checked msconfig and the program list. Farbar seems to have froze.
EDIT: oh and AVZ is http://z-oleg.com/secur/avz/ (I can't read Russian either.)
its what Kaspersky uses as part of its base or so I believe.
EDIT: I'm not scared of editing the registry, the only reason I don't want to do a reinstall is because of all the registry edits I lose, I cant back it up either because it wont save right.

 

[d00p98uy]

have you ran MalwareBytes? if so, click the logs tab in MBAM and post the log here
also, I don't think you should be using that, I've never heard of it, but maybe someone else knows more about it than me

 

[d00p98uy]

what, do you modify the registry alot? How would reinstalling effect you and your registry "edits"?
If we can get Farbar running, there may be some left over reg files we can delete, FUN! lol

 

[UserNam]

avz worked anyways, didn't run a full scan it takes 5 hours. the farbar tool, I interrupted it but it seems that it finshed.
View attachment FRST.txt

View attachment Addition.txt

 

[UserNam]

what, do you modify the registry alot? How would reinstalling effect you and your registry "edits"?
If we can get Farbar running, there may be some left over reg files we can delete, FUN! lol

if I reinstall windows then I have to reinstall my drives and edit them. Really I only care about the middle mouse key I added in the synaptics mouse. I use maya, 3ds, and photoshop so I sort need the button.

 

[d00p98uy]

Please, do as instructed. We cannot help you unless you cooperate. Is it possible that, while we do other things, that you can run MBAM, or does the computer lag up too much. Just because one virus scanner does not catch something, doesn't mean that virus's don't exist in your computer. There is no AIO solution.

Please Download and run ADWCleaner from my signature below. run and clean the virus's, then post the logs located at C:\ADWCleaner.

 

[d00p98uy]

How do you have so much money to afford these programs, along with Windows 7 Ultimate?

 

[UserNam]

View attachment AdwCleaner[R0].txt
that's the report, I'm going to remove everything.

 

[UserNam]

How do you have so much money to afford these programs, along with Windows 7 Ultimate?

I used a pc of ___ for four years to save up for all this, the pc its self was $400.00 off with a random promo code. Actually its because I'm a student.

 

[d00p98uy]

give me the new log also