1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved malware and virus removal: logs as requested part 1

Discussion in 'Malware and Virus Removal Archive' started by janwin7, 2011/07/28.

Page 2 of 3
  1. 2011/07/30
    janwin7

    janwin7 Inactive Thread Starter

    Joined:
    2011/04/02
    Messages:
    154
    Likes Received:
    0
    Well for now i only have a problem that some programs aren't responding and have to close down. When i had to reboot the pc for the otl messenger wasn't responding and had to close down by ending now! But this has nothing to do with the other errors i guess, right?
    My pc once was faster but it can be a little faster by increasing the virtual memory. This should be at least 1.5 times the ram memory. But it can be higher. How many times the ram memory can i go?
     
    janwin7,
    #21
  2. 2011/07/30
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Your computer could use another 512MB of real RAM for better performance.
    You have only 512MB installed right now.

    Was it just OTL case, or with something else as well?
     
    broni,
    #22


  3. to hide this advert.

  4. 2011/07/30
    janwin7

    janwin7 Inactive Thread Starter

    Joined:
    2011/04/02
    Messages:
    154
    Likes Received:
    0
    When i had to reboot the pc. Not when i'm working on it, no. At least not yet.
    I think it happens just when i have to reboot the pc or when i close down the pc. Maybe nothing to worry about. It's all fresh so i would leave it for now and when i get errors again or any other problems i'll let you know. Is that ok with you? Or should i do something else?
     
    janwin7,
    #23
  5. 2011/07/30
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    This topic will remain open, so if you have any further issues, you can always holler :)
     
    broni,
    #24
  6. 2011/07/30
    janwin7

    janwin7 Inactive Thread Starter

    Joined:
    2011/04/02
    Messages:
    154
    Likes Received:
    0
    Ok thank you Broni and have a nice weekend!!!:)
     
    janwin7,
    #25
  7. 2011/07/30
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Same to you :)
     
    broni,
    #26
  8. 2011/08/09
    janwin7

    janwin7 Inactive Thread Starter

    Joined:
    2011/04/02
    Messages:
    154
    Likes Received:
    0
    error

    Hi Broni,
    When i shut down my pc, the dwwin.exe keeps coming. Also the ending of the super anti spyware program. I have to close it down by hand. When i start up my pc, there is an applicatio error with the updatechecker.exe.The application has generated an exception that can not be processed.
    Proces-id=ox30c (780) thread-id=0x6f4 (1780).
    Sorry!:(
     
    janwin7,
    #27
  9. 2011/08/09
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Please download SystemLook from one of the links below and save it to your Desktop.
    Download Mirror #1
    Download Mirror #2
    64-bit users go HERE
    • Double-click SystemLook.exe to run it.
    • Vista\Win 7 users:: Right click on SystemLook.exe, click Run As Administrator
    • Copy the content of the following box into the main textfield:
      Code:
      :filefind
dwwin.exe
:regfind
dwwin*
    • Click the Look button to start the scan.
    • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
    Note: The log can also be found on your Desktop entitled SystemLook.txt
     
    broni,
    #28
  10. 2011/08/10
    janwin7

    janwin7 Inactive Thread Starter

    Joined:
    2011/04/02
    Messages:
    154
    Likes Received:
    0
    error

    An error occured in systemlook.exe while running and had to close down.
    I'll try again.
     
    janwin7,
    #29
  11. 2011/08/10
    janwin7

    janwin7 Inactive Thread Starter

    Joined:
    2011/04/02
    Messages:
    154
    Likes Received:
    0
    error

    The error occured again, but there is a log.

    SystemLook 30.07.11 by jpshortstuff
    Log created at 08:45 on 10/08/2011 by Jan Rijken
    Administrator - Elevation successful

    ========== filefind ==========

    Searching for "dwwin.exe "
    C:\WINDOWS\$NtServicePackUninstall$\dwwin.exe -----c- 180224 bytes [20:27 15/06/2009] [23:03 03/08/2004] AAE33D1ED1238E834B4F5FE214EAC59E
    C:\WINDOWS\ServicePackFiles\i386\dwwin.exe ------- 180224 bytes [20:14 28/08/2007] [17:02 14/04/2008] DD80524C67AF4017A7ABE51C99D1A33A
    C:\WINDOWS\system32\dwwin.exe --a---- 180224 bytes [12:00 11/09/2002] [17:02 14/04/2008] DD80524C67AF4017A7ABE51C99D1A33A

    ========== regfind ==========

    Searching for "dwwin* "
     
    janwin7,
    #30
  12. 2011/08/10
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    broni,
    #31
  13. 2011/08/11
    janwin7

    janwin7 Inactive Thread Starter

    Joined:
    2011/04/02
    Messages:
    154
    Likes Received:
    0
    janwin7,
    #32
  14. 2011/08/11
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Re-run Autoruns.

    Scroll down to "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" section, UN-check "FileHippo.com" entry.

    Scroll down to "HKLM\System\CurrentControlSet\Services" section, UN-check "ose" entry.

    Restart computer and let me know about errors.
     
    broni,
    #33
  15. 2011/08/11
    janwin7

    janwin7 Inactive Thread Starter

    Joined:
    2011/04/02
    Messages:
    154
    Likes Received:
    0
    Hi Broni,
    The dwwin.exe keeps coming. Another error was the wscntfy.exe. The program:confused: doesn't respond anymore so i had to close it down by hand. When i start up my pc the filehippo update checker is gone.
     
    janwin7,
    #34
  16. 2011/08/11
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Do you have Windows XP CD?
     
    broni,
    #35
  17. 2011/08/12
    janwin7

    janwin7 Inactive Thread Starter

    Joined:
    2011/04/02
    Messages:
    154
    Likes Received:
    0
    I'm afraid not!
    I should have somewhere but i can't find it. Sorry!
     
    janwin7,
    #36
  18. 2011/08/12
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Go Start>Run ( "Start Search" in Vista/7), type in:
    sfc /scannow
    Click OK (hold CTRL, and SHIFT, hit Enter in Vista/7).
    Have Windows CD/DVD handy (with Vista/7, most likely, you won't need it).
    If System File Checker (sfc) will find any errors, it may ask you for the CD/DVD (rarely in Vista/7 case).
     
    broni,
    #37
  19. 2011/08/16
    janwin7

    janwin7 Inactive Thread Starter

    Joined:
    2011/04/02
    Messages:
    154
    Likes Received:
    0
    sfc

    I did run the sfc and i had to put in the cd. But nothing changed. The errors are still there. sorry!
     
    janwin7,
    #38
  20. 2011/08/16
    janwin7

    janwin7 Inactive Thread Starter

    Joined:
    2011/04/02
    Messages:
    154
    Likes Received:
    0
    The thing is that every time i start up my pc i have to activate the norman antivirus. When i shut down my pc Norman stops working. All but one of the programs in the start up are enabled. Even Norman.
     
    janwin7,
    #39
  21. 2011/08/16
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You said you didn't have Windows CD....hmmm
     
    broni,
    #40
Page 2 of 3

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...