This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Possible virus,mutiple process running unknown.

129 min read

This thread's last reply is from November 10, 2013, 5:28 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Hi rmrrar,

If you are still having issues it maybe be related to the Revo Uninstaller programs you have. I looked up the program and noticed it had the ability to search out remnants of programs that do not uninstall correctly. The problem with removing files or registry entries related to an installed program is that the Windows OS uses many related files for itself. Also, by using Revo to remove registry entries, the program may remove entries related to active system or program files rendering them useless and then your system becomes unstable.

At this point, IF you are still having issues, the only thing I can recommend is to format and reinstall the OS.

Please post back and let me know if the computer is still having issues.

wbg
I had a blue screen error pop up this is what it said . I also cannot remove revo 1.94 from my pc any ideas ? thanks , rmrrar

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 9f
BCP1: 0000000000000003
BCP2: FFFFFA80061F9060
BCP3: FFFFF80000B9C518
BCP4: FFFFFA8004309C10
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\102713-23072-01.dmp
C:\Users\ROBERT\AppData\Local\Temp\WER-3301885-0.sysdata.xml

Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid= ... cid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
C:\windows\system32\en-US\erofflps.txt
rmrrar,

I understand that your computer had a blue screen event. It is the same blue screen event log you posted earlier.

Did you read my previous post?

Do you understand that I am recommending you format and reinstall your operating system since you are still having issues?
Oh, my fault, I misunderstood that in your post. If I am not able to do that at this time is there anything that can be done currently to do with the removal of the revo 1.94 program ? thank you rmrrar
Hi rmrrar,

I'm not sure that I can help you remove Revo Uninstaller 1.94 without uninstalling pieces of Revo Uninstaller Pro 2.5.3.
Like I said earlier your computers registry appears damaged and so formatting and reinstalling would be the best way to go.
However, we can check one more thing to be sure.

Please download and run WVCheck and post back the report it creates:

  • Right-click the WVCheck.exe icon on your Desktop and then select Run As Administrator from the popup menu..
  • As indicated by the prompt, this program can take a while depending on your hard drive space.
  • Once the program is done, copy the contents of the Notepad file as a reply.
Hi rmrrar,

It has been two days since my last post.

  • Do you still need help?
  • Do you need more time?
  • Are you having problems following my instructions?
  • According to Malware Removal's latest policy, topics can be closed after 3 days without a response.
  • If you do not reply within the next 24 hours, this topic will be closed.
yes sorry I had a death in my family but im running the program now
Windows Validation Check
Version: 1.9.12.5
Log Created On: 0107_03-11-2013
-----------------------

Windows Information
-----------------------
Windows Version: Windows 7 Service Pack 1
Windows Mode: Normal
Systemroot Path: C:\windows

WVCheck's Auto Update Check
-----------------------
Auto-Update Option: Download updates automatically, but ask me when I want to install them.
-----------------------
Last Success Time for Update Detection: 2013-11-02 16:09:33
Last Success Time for Update Download: 2013-11-02 04:15:50
Last Success Time for Update Installation: 2013-11-02 04:16:54


WVCheck's Registry Check Check
-----------------------
Antiwpa: Not Found
-----------------------
Chew7Hale: Not Found
-----------------------


WVCheck's File Dump
-----------------------
C:\Windows\System32\slwga.dll
Size: 14336 bytes
Creation; 20/6/2011 22:34:16
Modification; 20/11/2010 6:21:24
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------
C:\Windows\SysWOW64\slwga.dll
Size: 14336 bytes
Creation; 20/6/2011 22:34:16
Modification; 20/11/2010 6:21:24
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\amd64_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_5d778f71b9f4fd55\slwga.dll
Size: 15360 bytes
Creation; 20/6/2011 22:34:34
Modification; 20/11/2010 7:27:26
MD5; b6d6886149573278cba6abd44c4317f5
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_0158f3ee01978c1f\slwga.dll
Size: 14336 bytes
Creation; 20/6/2011 22:34:16
Modification; 20/11/2010 6:21:24
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------


WVCheck's Dir Dump
-----------------------
WVCheck found no known bad directories.


WVCheck's Missing File Check
-----------------------
WVCheck found no missing Windows files.


WVCheck's MBAM Quarantine Check
-----------------------
There were no bad files quarantined by MBAM.


WVCheck's HOSTS File Check
-----------------------
WVCheck found no bad lines in the hosts file.


WVCheck's MD5 Check
EXPERIMENTAL!!
-----------------------
user32.dll - 5e0db2d8b2750543cd2ebb9ea8e6cdd3


-------- End of File, program close at 0110_03-11-2013 --------
Hi rmrrar,

I apologize for the late reply. I have been having internet connection problems.

It is like I said before. Your logs appear clean and also show signs that the registry is damaged.
This is why I said you needed to format and reinstall the Operating System.

Sometimes what appears to be a simple infection turns out to be something complex and the resulting damage can be extensive. The fact that you have 2 REVO removal programs and one cannot be removed normally tells me that your registry is corrupt.
That being said, I am trained in malware removal. I am not equipped to deal with corrupted registries.

wbg
Thanks for all your help I will take your advise . thanks again rmrrar
As your problems appear to require a reformat,