2
« on: August 19, 2014, 03:44:46 pm »
Alright here is an update Shane. I finished doing what bleepingcomputer told me and your tool ran perfectly after that seems i had some deep malware/rootkit. Here are the results.
System Variables
--------------------------------------------------------------------------------
OS: Windows 7 Home Premium
OS Architecture: 64-bit
OS Version: 6.1.7601
OS Service Pack: Service Pack 1
Computer Name: RYAN-PC
Windows Drive: C:\
Windows Path: C:\Windows
Program Files: C:\Program Files
Program Files (x86): C:\Program Files (x86)
Current Profile: C:\Users\Ryan
Current Profile SID: S-1-5-21-3514845564-2089270939-1637311307-1000
Current Profile Classes: S-1-5-21-3514845564-2089270939-1637311307-1000_Classes
Profiles Location: C:\Users
Profiles Location 2: C:\Windows\ServiceProfiles
Local Settings AppData: C:\Users\Ryan\AppData\Local
--------------------------------------------------------------------------------
System Information
--------------------------------------------------------------------------------
System Up Time: 0 Days 00:02:49
Process Count: 46
Commit Total: 2.01 GB
Commit Limit: 11.99 GB
Commit Peak: 2.03 GB
Handle Count: 14103
Kernel Total: 428.52 MB
Kernel Paged: 379.05 MB
Kernel Non Paged: 49.47 MB
System Cache: 1.22 GB
Thread Count: 793
--------------------------------------------------------------------------------
Memory Before Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 11.99 GB
Memory Used: 1.89 GB(15.7819%)
Memory Avail.: 10.10 GB
--------------------------------------------------------------------------------
Cleaning Memory Before Starting Repairs...
Memory After Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 11.99 GB
Memory Used: 1.71 GB(14.2262%)
Memory Avail.: 10.28 GB
--------------------------------------------------------------------------------
Starting Repairs...
Started at (19/08/2014 06:18:39 PM)
01 - Reset Registry Permissions 01/03
HKEY_CURRENT_USER & Sub Keys
Start (19/08/2014 06:18:40 PM)
Running Repair Under Current User Account
Done (19/08/2014 06:18:42 PM)
01 - Reset Registry Permissions 02/03
HKEY_LOCAL_MACHINE & Sub Keys
Start (19/08/2014 06:18:42 PM)
Running Repair Under System Account
Done (19/08/2014 06:21:14 PM)
01 - Reset Registry Permissions 03/03
HKEY_CLASSES_ROOT & Sub Keys
Start (19/08/2014 06:21:14 PM)
Running Repair Under System Account
Done (19/08/2014 06:21:50 PM)
02 - Reset File Permissions: C:
C: & Sub Folders
Start (19/08/2014 06:21:50 PM)
Trying To Run Repair As Trusted Installer.
You will see a Interactive Services Detection Window.
The Repair Is Running In That Window.
This Is Normal And Will Go Away Once The Repair Is Finished.
Running Repair As Trusted Installer
Done (19/08/2014 06:21:53 PM)
02 - Reset File Permissions: D:
D: & Sub Folders
Start (19/08/2014 06:21:53 PM)
Trying To Run Repair As Trusted Installer.
You will see a Interactive Services Detection Window.
The Repair Is Running In That Window.
This Is Normal And Will Go Away Once The Repair Is Finished.
Running Repair As Trusted Installer
Done (19/08/2014 06:21:54 PM)
02 - Reset File Permissions: All Profiles
C:\Users & Sub Folders
Start (19/08/2014 06:21:54 PM)
Running Repair Under System Account
Done (19/08/2014 06:21:55 PM)
02 - Reset File Permissions: Current Profile
C:\Users\Ryan & Sub Folders
Start (19/08/2014 06:21:55 PM)
Running Repair Under System Account
Done (19/08/2014 06:21:56 PM)
02 - Reset File Permissions: Cleanup
Repairing Restricted Folders Permissions To Avoid Infinite Loops
Start (19/08/2014 06:21:56 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:21:59 PM)
03 - Reset Service Permissions
Start (19/08/2014 06:21:59 PM)
Running Repair Under System Account
Done (19/08/2014 06:22:02 PM)
04 - Register System Files
Start (19/08/2014 06:22:02 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:22:18 PM)
05 - Repair WMI
Start (19/08/2014 06:22:18 PM)
Starting Security Center So We Can Export The Security Info.
Exporting Antivirus Info...
Microsoft Security Essentials Exported.
Exporting AntiSpyware Info...
Windows Defender Exported.
Microsoft Security Essentials Exported.
Exporting 3rd Party Firewall Info...
No Firewall Products Reported.
Running Repair Under Current User Account
Done (19/08/2014 06:23:51 PM)
06 - Repair Windows Firewall
Start (19/08/2014 06:23:51 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:24:15 PM)
07 - Repair Internet Explorer
Start (19/08/2014 06:24:15 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:24:28 PM)
08 - Repair MDAC/MS Jet
Start (19/08/2014 06:24:28 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:24:33 PM)
09 - Repair Hosts File
Start (19/08/2014 06:24:33 PM)
Running Repair Under System Account
Done (19/08/2014 06:24:34 PM)
10 - Remove Policies Set By Infections
Start (19/08/2014 06:24:34 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:24:37 PM)
11 - Repair Start Menu Icons Removed By Infections
Start (19/08/2014 06:24:37 PM)
Running Repair Under System Account
Done (19/08/2014 06:24:38 PM)
12 - Repair Icons
Start (19/08/2014 06:24:38 PM)
Running Repair Under Current User Account
Done (19/08/2014 06:24:39 PM)
13 - Repair Winsock & DNS Cache
Start (19/08/2014 06:24:39 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:24:54 PM)
14 - Remove Temp Files
Start (19/08/2014 06:24:54 PM)
Running Repair Under System Account
Done (19/08/2014 06:24:55 PM)
15 - Repair Proxy Settings
Start (19/08/2014 06:24:55 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:24:57 PM)
16 - Unhide Non System Files
Start (19/08/2014 06:24:57 PM)
C:\ - Total Files Unhidden: 245 - Check Unhidden_Files.txt for list of files unhidden
D:\ - Total Files Unhidden: 43 - Check Unhidden_Files.txt for list of files unhidden
Done (19/08/2014 06:27:32 PM)
17 - Repair Windows Updates
Start (19/08/2014 06:27:32 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Setting Windows Updates Files That Are In Use To Be Removed At Next Boot.
Done (19/08/2014 06:27:52 PM)
18 - Repair CD/DVD Missing/Not Working
Start (19/08/2014 06:27:52 PM)
iTunes not found, not applying UpperFilters iTunes Reg Key
Done (19/08/2014 06:27:52 PM)
19 - Repair Volume Shadow Copy Service
Start (19/08/2014 06:27:52 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:10 PM)
21 - Repair MSI (Windows Installer)
Start (19/08/2014 06:28:10 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:18 PM)
22 - Repair Windows Snipping Tool
Start (19/08/2014 06:28:18 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:21 PM)
23.01 - Repair bat Association
Start (19/08/2014 06:28:21 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:23 PM)
23.02 - Repair cmd Association
Start (19/08/2014 06:28:23 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:25 PM)
23.03 - Repair com Association
Start (19/08/2014 06:28:25 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:27 PM)
23.04 - Repair Directory Association
Start (19/08/2014 06:28:27 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:29 PM)
23.05 - Repair Drive Association
Start (19/08/2014 06:28:29 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:31 PM)
23.06 - Repair exe Association
Start (19/08/2014 06:28:32 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:34 PM)
23.07 - Repair Folder Association
Start (19/08/2014 06:28:34 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:36 PM)
23.08 - Repair inf Association
Start (19/08/2014 06:28:36 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:38 PM)
23.09 - Repair lnk (Shortcuts) Association
Start (19/08/2014 06:28:38 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:40 PM)
23.10 - Repair msc Association
Start (19/08/2014 06:28:40 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:42 PM)
23.11 - Repair reg Association
Start (19/08/2014 06:28:42 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:45 PM)
23.12 - Repair scr Association
Start (19/08/2014 06:28:45 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:47 PM)
24 - Repair Windows Safe Mode
Start (19/08/2014 06:28:47 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:28:49 PM)
25 - Repair Print Spooler
Start (19/08/2014 06:28:49 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:29:02 PM)
26 - Restore Important Windows Services
Start (19/08/2014 06:29:02 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:29:06 PM)
27 - Set Windows Services To Default Startup
Start (19/08/2014 06:29:06 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:29:09 PM)
Skipping Repair.
Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
Current version: 6.1
Skipping Repair.
Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
Current version: 6.1
Skipping Repair.
Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
Current version: 6.1
31 - Repair Windows 'New' Submenu
Start (19/08/2014 06:29:10 PM)
Running Repair Under Current User Account
Running Repair Under System Account
Done (19/08/2014 06:29:12 PM)
Cleaning up empty logs...
All Selected Repairs Done.
Done at (19/08/2014 06:29:12 PM)
Total Repair Time: 00:10:35
...YOU MUST RESTART YOUR SYSTEM...
Running Repair Under Current User Account