Broadband Tech > Security > Security Cleanup > HJT Log Task Bar Icons Missing

reply to Spice300

Re: HJT Log Task Bar Icons Missing

quote:

---

I uninstall Adobe Acrobat Reader 7.0 which was apparently modified by the malware.

---

quote:

---

I found the following and moved them to a different directory:

C:\-12626~1
C:\0xf9.exe
C:\lsass.exe
C:\rxfybewc.exe
C:\uibvb.exe
C:\vfmf.exe
C:\WINDOWS\msavsc.dll
C:\WINDOWS\msctrl.dll
C:\WINDOWS\msfw.dll
C:\WINDOWS\msiemon.dll
C:\WINDOWS\mssadv.dll
C:\WINDOWS\msscan.dll
C:\WINDOWS\system32\jkshfuiehi.dll

---

http://www.funkytoad.com/download/HostsXpert.zip
 

http://downloads.andymanchesta.com/RemovalTools/SDFix.exe]
 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe
 

I have successfully executed all instructions in the listed order.

There are three other log files from the scans I conducted on May 14, 2009, in Malwarebytes Anti-malware's Log folder. Two of them show the malware that it detected and quarantined.

After completing all of your other instructions, Hijack This displays an error message when creating the log file:

An unexpected error has occurred at procedure:
modRegistry_IniGetString(sFile=system.ini, sSection=boot, sValue=Shell)

Since my computer is off line I answer "no" to reporting the problem to Hijack This.

After rebooting, the slowness is gone when the desktop appears. The touch pad tapping is still enabled and the quick launch icons, except the ones previously listed, are still missing.

Since it has been occurring for more than a year, I am not sure if this is related to the problem with the touch pad. When I open "Control Panel" after a reboot the default view is "Details" rather than the last selected view of
"Icons." After changing the view to "Icons," it will remain selected until I reboot the computer.

report.txt 4703 bytes

mbam-log-200···-31).txt 833 bytes

log.txt 7588 bytes

You can delete the file SDFix.exe that you downloaded and the folder C:\SDFix.

Do you know what these Scheduled Tasks are for, and if they are legitimate?

quote:

---

2008-11-21 c:\windows\Tasks\FAPZ.job
- c:\util\FAPZ.BAT [2008-03-09 18:26]

2009-05-19 c:\windows\Tasks\GETFAP.job
- c:\util\GETFAP.BAT [2008-11-21 23:19]

---

quote:

---

Since my computer is off line I answer "no" to reporting the problem to Hijack This.

---

quote:

---

After rebooting, the slowness is gone when the desktop appears. The touch pad tapping is still enabled and the quick launch icons, except the ones previously listed, are still missing.

---

quote:

---

When I open "Control Panel" after a reboot the default view is "Details" rather than the last selected view of "Icons." After changing the view to "Icons," it will remain selected until I reboot the computer

---

quote:

---

Do you know what these Scheduled Tasks are for, and if they are legitimate?

---

quote:

---

Since my computer is off line I answer "no" to reporting the problem to Hijack This.

Are you unable to connect to the Internet?

---

quote:

---

However, the items you previously listed do not show on the Quick Launch bar, they are part of the System Tray. Right-click on an unused part of the Task Bar, Select Properties, and clear the checkmark for Hide Inactive icons if one is there.

---

quote:

---

While displaying the control panel as Icons, go to Tools > Folder Options, click the View tab, and scroll down and place a checkmark in "Remember each folder's view settings", and select OK.

---

quote:

---

How is the system running now?

---

HJTLOG4.TXT 4969 bytes

Your logs are clean.

I don't think the other problems are malware related.

Here are some links related to the Touchpad:
»209.167.114.38/support/techsuppo···1454.htm
»209.167.114.38/support/techsuppo···1279.htm
»209.167.114.38/support/techsuppo···0831.htm
»209.167.114.38/support/techsuppo···0770.htm
»209.167.114.38/support/techsuppo···0762.htm
»209.167.114.38/support/techsuppo···0757.htm

This article is on troubleshooting Toshiba Power Saver /Power Management:
»209.167.114.38/support/techsuppo···1051.htm

There's also a link on the left of those pages for Drivers and Downloads.
There is also a Toshiba laptop forum at:
»laptopforums.toshiba.com/tshb/

Possibly a good fit right here for the System Tray icons missing would be the Microsoft Help forum:
»Microsoft Help

Go to start > run and copy and paste next command in the field:
ComboFix /u

Make sure there's a space between Combofix and /
Then hit enter.

This will uninstall Combofix, delete its related folders and files, reset your clock settings, hide file extensions, hide the system/hidden files and resets System Restore again.

Create a Restore Point
•Go to Start > Programs > Accessories > System Tools > System Restore
•Select Create a Restore Point and then Next.
•In the box for "Restore point description", enter a descriptive name and press Create
•When the "Restore Point Created" window appears, click Close

Run Disk Cleanup
•Go to Start > Run and type the below line:
cleanmgr
•Click OK
•If you have more than one drive, select the drive Windows is installed on
•Click OK
•When Disk Cleanup opens, select the More Options tab
•In the System Restore section (bottom of window), click Cleanup
•In the confirmation window that opens, click Yes[

Now click on the Disk Cleanup tab and select the following items:
•Downloaded Program Files
•Temporary Internet Files
•Recycle Bin
•Temporary Files
Click OK
in the confirmation window, select Yes (Disk Cleanup will close).

You need to go to Windows Update and install all the critical updates or your system will remain vulnerable to exploits that there have long been fixes for that you don't have installed. That includes XP Service Pack 3, and updates that wer issued since then.

There are several free utilities you can use to help keep malware off your system:

A HOSTS file will prevent Internet Explorer from communicating with sites known to be associated with adware or spyware. A good regularly updated HOST file is MVPS HOSTS File, available at »www.mvps.org/winhelp2002/hosts.htm.

A free non-resident utility to prevent the installation of ActiveX-based malware is JavaCool's SpywareBlaster. For real-time protection, there is SpywareGuard. Both are available at »www.javacoolsoftware.com/products.html.

I recommend reading Tony Klein's article So How did I get Infected in the First Place? at »www.spywareinfoforum.com/index.p···ic=60955

Does your malware problem appear resolved?
--
Proud ASAP member since 2005

I think all of the malware has been removed. The problems with the touch pad resetting to the default values and the missing icons on the System Tray, are probably caused by something the malware altered in Windows.

Thank-you for your assistance.

I'm glad I could help.