1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Problem with deleting missing files in hijackthis

Discussion in 'Virus & Other Malware Removal' started by willmon21, Apr 30, 2010.

Thread Status:
Not open for further replies.
Advertisement
  1. willmon21

    willmon21 Thread Starter

    Joined:
    Apr 23, 2010
    Messages:
    12
    I have just got over a winbooterr virus and I was wanting to submit my hijackthis log due to the fact that I can't remove missing files in hijackthis. I run it in administrator mode and I have the box checked so it will start in administrator mode. I delete the missing files rescan and they are still there what can I do about this? Also there is 2 things that aren't set for the search options in internet explorer I have reset the browser and they still aren't there. And I have three greyed out options in the tools menu in internet explorer diagnose connection problems, reopen last browsing session, and combatability view. I suppose a few of them are suppose to be greyed out but I believe combatability view should be lit up. I have the hijackthis log attached for it to be looked over thank you.
     

    Attached Files:

  2. willmon21

    willmon21 Thread Starter

    Joined:
    Apr 23, 2010
    Messages:
    12
  3. willmon21

    willmon21 Thread Starter

    Joined:
    Apr 23, 2010
    Messages:
    12
    It has been about a week since I started this post. I don't exactly mind waiting as I don't have a virus or anything. I am guessing that all the volunteers are busy with the more important cases with bad virus's and stuff. Well anyways if I don't get a reply within a few days I am just going to mark this as solved.
     
  4. NeonFx

    NeonFx Malware Specialist

    Joined:
    Oct 22, 2008
    Messages:
    4,811
    Hello there :cool: Welcome to the TSG Forums.
    My name is NeonFx. I'll be glad to help you with your computer problems. Logs can take some time to research, so please be patient with me.


    Please note the following:
    • The fixes are specific to your problem and should only be used on this machine.
    • Please continue to review my answers until I tell you your machine appears to be clean. Absence of symptoms does not necessarily mean that the system is completely clean.
    • It's often worth reading through these instructions and printing them for ease of reference. I may ask you to boot into Safe Mode where you will be unable to follow my instructions online.
    • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
    • Please reply to this thread. Do not start a new topic.



    Please refrain from fixing things on your own without being sure about what you're doing. HijackThis can't always tell when a file is actually missing or not and in your case, they're not actually missing. It's a bug in HJT because it can't read 64bit systems properly.


    Step 1

    Download OTS to your Desktop

    • Close ALL OTHER PROGRAMS.
    • Double-click on OTS.exe to start the program.
    • Check the box that says Scan All Users
    • Make sure Include 64 Bit scans is selected
    • Under Basic Scans please change the radio button under Registry from Safe List to All.
    • Under Additional Scans check the following:
      • Reg - Desktop Components
      • Reg - Disabled MS Config Items
      • Reg - NetSvcs
      • Reg - Shell Spawning
      • Reg - Uninstall List
      • File - Lop Check
      • File - Purity Scan
      • Evnt - EvtViewer (last 10)
    • Please paste the contents of the following codebox into the Custom Scans box at the bottom
    Code:
    %SYSTEMDRIVE%\*.exe
    /md5start
    eventlog.dll
    scecli.dll
    netlogon.dll
    cngaudit.dll
    sceclt.dll
    ntelogon.dll
    logevent.dll
    iaStor.sys
    nvstor.sys
    atapi.sys
    IdeChnDr.sys
    viasraid.sys
    AGP440.sys
    vaxscsi.sys
    nvatabus.sys
    viamraid.sys
    nvata.sys
    nvgts.sys
    iastorv.sys
    ViPrt.sys
    eNetHook.dll
    ahcix86.sys
    KR10N.sys
    nvstor32.sys
    ahcix86s.sys
    nvrd32.sys
    symmpi.sys
    adp3132.sys
    mv61xx.sys
    /md5stop
    %systemroot%\*. /mp /s
    CREATERESTOREPOINT
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    • Now click the Run Scan button on the toolbar.
    • Let it run unhindered until it finishes.
    • When the scan is complete Notepad will open with the report file loaded in it.
    • Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.
    Please attach the log in your next post. To do so click on the blue "Reply" button or "Go Advanced" and click on the "Manage Attachments" button.
     
  5. willmon21

    willmon21 Thread Starter

    Joined:
    Apr 23, 2010
    Messages:
    12
    I thought I put it somewhere but I guess not. I tried to run OTS and it kept saying not a valid win32 application no matter what I did to try to make it run.
     
  6. NeonFx

    NeonFx Malware Specialist

    Joined:
    Oct 22, 2008
    Messages:
    4,811
    Try deleting it, redownloading it and running it again. Right clicking on it and selecting "Run As Administrator" might help as well.


    Also do the following:

    Please download exeHelper to your desktop.
    Double-click on exeHelper.com to run the fix.
    A black window should pop up, press any key to close once the fix is completed.
    Post the contents of exehelperlog.txt (Will be created in the directory where you ran exeHelper.com, and should open at the end of the scan)

    Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).
     
  7. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/920154

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice