Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

MS Removal Tool uninstalled but corrupt files remain


  • Please log in to reply
1 reply to this topic

#1 OldTed

OldTed

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:08:57 PM

Posted 19 April 2011 - 05:26 PM

My computer was infected with MS Removal Tool. I followed the steps in the Bleeping Computer website and it was a success. The infection is gone and my computer works as well as before. In the Malware Bytes program, two infected files and and one registry were listed and I wrote them down before doing the Removal. The 2 files still exist and I have not checked the registry. Shouldn't these files be gone? The size is only 192 bytes. Are they empty? Can I delete these folders?
Thanks for any assistance.

BC AdBot (Login to Remove)

 


#2 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:11:57 PM

Posted 23 April 2011 - 03:55 PM

Hi OldTed,

:welcome: to BleepingComputer. Sorry for the delay. My name is Jason and I will be helping you. (You can either call me by my screenname jntkwx, or Jason is fine.)

Yes, it is odd that the files are not deleted.

Let's make sure Malwarebytes is up to date:

  • Make sure you are connected to the Internet.
  • Open Malwarebytes' and click on the Update tab.
  • Then click on the Check for Updates button. Malwarebytes will download the latest database.

Let's then run a quick scan with Malwarebytes:

  • Under the Scanner tab, make sure the "Perform Quick Scan" option is selected.
  • Click on the Scan button.
  • When finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box, then click the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked and then click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows the database version and your operating system.
  • Exit Malwarebytes' when done.
Note: If Malwarebytes' encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally will prevent Malwarebytes' from removing all the malware.


Then download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

To recap, please include with your reply:
  • The full Malwarebytes log
  • The contents of the checkup.txt file from Security Check

Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users