Problem with deleting missing files in hijackthis

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

willmon21

Thread Starter
Joined
Apr 23, 2010
Messages
12
I have just got over a winbooterr virus and I was wanting to submit my hijackthis log due to the fact that I can't remove missing files in hijackthis. I run it in administrator mode and I have the box checked so it will start in administrator mode. I delete the missing files rescan and they are still there what can I do about this? Also there is 2 things that aren't set for the search options in internet explorer I have reset the browser and they still aren't there. And I have three greyed out options in the tools menu in internet explorer diagnose connection problems, reopen last browsing session, and combatability view. I suppose a few of them are suppose to be greyed out but I believe combatability view should be lit up. I have the hijackthis log attached for it to be looked over thank you.
 

Attachments

willmon21

Thread Starter
Joined
Apr 23, 2010
Messages
12
It has been about a week since I started this post. I don't exactly mind waiting as I don't have a virus or anything. I am guessing that all the volunteers are busy with the more important cases with bad virus's and stuff. Well anyways if I don't get a reply within a few days I am just going to mark this as solved.
 

NeonFx

Malware Specialist
Joined
Oct 22, 2008
Messages
4,811
Hello there :cool: Welcome to the TSG Forums.
My name is NeonFx. I'll be glad to help you with your computer problems. Logs can take some time to research, so please be patient with me.


Please note the following:
  • The fixes are specific to your problem and should only be used on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clean. Absence of symptoms does not necessarily mean that the system is completely clean.
  • It's often worth reading through these instructions and printing them for ease of reference. I may ask you to boot into Safe Mode where you will be unable to follow my instructions online.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.



Please refrain from fixing things on your own without being sure about what you're doing. HijackThis can't always tell when a file is actually missing or not and in your case, they're not actually missing. It's a bug in HJT because it can't read 64bit systems properly.


Step 1

Download OTS to your Desktop

  • Close ALL OTHER PROGRAMS.
  • Double-click on OTS.exe to start the program.
  • Check the box that says Scan All Users
  • Make sure Include 64 Bit scans is selected
  • Under Basic Scans please change the radio button under Registry from Safe List to All.
  • Under Additional Scans check the following:
    • Reg - Desktop Components
    • Reg - Disabled MS Config Items
    • Reg - NetSvcs
    • Reg - Shell Spawning
    • Reg - Uninstall List
    • File - Lop Check
    • File - Purity Scan
    • Evnt - EvtViewer (last 10)
  • Please paste the contents of the following codebox into the Custom Scans box at the bottom
Code:
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
/md5stop
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
  • Now click the Run Scan button on the toolbar.
  • Let it run unhindered until it finishes.
  • When the scan is complete Notepad will open with the report file loaded in it.
  • Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.
Please attach the log in your next post. To do so click on the blue "Reply" button or "Go Advanced" and click on the "Manage Attachments" button.
 

willmon21

Thread Starter
Joined
Apr 23, 2010
Messages
12
I thought I put it somewhere but I guess not. I tried to run OTS and it kept saying not a valid win32 application no matter what I did to try to make it run.
 

NeonFx

Malware Specialist
Joined
Oct 22, 2008
Messages
4,811
Try deleting it, redownloading it and running it again. Right clicking on it and selecting "Run As Administrator" might help as well.


Also do the following:

Please download exeHelper to your desktop.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
Post the contents of exehelperlog.txt (Will be created in the directory where you ran exeHelper.com, and should open at the end of the scan)

Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

Top