newbe17,
Kaspersky takes forever and is finicky but I think it's the best online scanner. Your scan will probably take at least 2 hours. Best bet is to start the scan before going to bed and then check it in the morning.
If Kaspersky has a problem with your Java, it will just refuse to even try to run. If it started running, your Java should be OK.
As far as it's worth. We gotten everything I can see. The point in running it is to get what we haven't seen some other way. Avast, and Mbam have taken care of everything they're going to. Looking back, it appears you are on Dial-up? If tieing up the phone line for hours is a hardship, we can take the risk that we got it all and move on with some closeout procedures.
Tomk,
The windows hosts file that mbam keeps finding and is not able to fully delete still hangnails me. I did a boot time scan with avast and like you said, it came up clean, it's done all it's going to do. I don't recall ever uploading the c host file for an analysis. Have we done that yet?
newbe17
Tomk,
there are 4 files in the folder: C:\WINDOWS\hosts . I scanned each one separately
they all came back clean, exept at the bottom of the page it showed different results, and that confused me.
Either way, can I reach in grab C:\WINDOWS\hosts and delete it from my pc and end all this? Seems to me like the best thing to do.
newbe17
newbe17,
You can delete that file.
I let your boot issue slip my mind. Give me a little time to work on it. If I can't come up with a solution by tommorrow, we will do a little closeout housekeeping and then send you over to the Tech Team.
Tomk,
Good morning I did as you asked , the running system is "Microsoft Windows XP Home Edition"/nonexecute=option/ Is it supposed to read like that? while browsing that box I noticed the edit button and clicked on it just to see what was inside and I copied this: [boot loader]
timeout=0
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
This computer still lags very badly. While you and I were at work on it a couple of days ago I was only able to download a small version of java platform, I could never get the version you told me to download. I spent all day yesterday and all night last night trying to get the version you told me to get. Finally, at about 7:30 this a.m. the download was completed, I went to install it, and it said it was not a valid windows 32 application, which if my understanding is correct would mean the I simply didn't get a good download.
newbe 17
Post the contents of the DDS.txt report in your next reply
Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and the click UPLOAD.
malicious virus removal tool will not interfere with your anti-virus and is not worthless. Please update it.
However, I think it's time to seen you over to the Tech Team and see if they can help you with your boot problem. We have exceeded my usefulness.
I suggest you post a question in the Windows Forum. Please provide a link there to this thread so that they will have access to your logs and they can see what you did here.
Log looks good
Time for some housekeeping
Click START then RUN
Now type Combofix /u in the runbox and click OK
Note the space between the X and the U, it needs to be there.
[external image: Posted Image]
The above procedure will:
Implement some cleanup procedures.
Reset System Restore.
Please re-enable any security that was disabled.
Download ToolsCleaner2 to your desktop and run it ( by de A.Rothstein & Dj Quiou )
Click the Pt. Restauration button and press OK to the prompts.
Click the Corbeille button and press OK to the prompt.
Click the Fichiers temp button and press OK to the prompt.
Click the Recherche button and let it run ( it may look like it freezes but let it continue )
Once it is done click the Suppression button and let it remove anything it finds.
Close the program
The following is my standard advice for the future. Use what you can and pat yourself on the back for what you're already doing.
Tomk,
I understand all that you have noted above. I don't know how to thank you enough for all the time and effort you put in to helping me, except to give back to someone else what was so freely given to me. Strange as it may sound, I'm going to miss working with you - fond memories of a bad situation It is good to know that in this world we live in today there are still some really good people, Tom, and you are one of them. May you continue to let God bless you and guide your path. Thank you
newbe17 P.S. I have the malicious tool downloaded but I did not install it, and now I cant's find it to install it, lol . Could you please tell me where it is?
newbe17,
It installs itself just like a windows update. Shouldn't be anything for you to do.
You are very welcome.
Glad to help.
If you do join the classroom, I'll watch for you.
Good Luck and be Well.
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please begin a New Topic.
Tomk,
I'm baaaack Need to get rid of Virtumonde and Win32.TDSS.rtk. but iv'e done the preventive steps in the "preventing malware" article u supplied and have online armor installed and running. When I rebooted after installing online armor firewall spy bot search and destroy ran a boot scan all by itself It found only 1 infection, the virtumonde, and for the second time this evening, said it had fixed the problem. So, here I sit
newbe17
✨ Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI
I did as you asked , the running system is "Microsoft Windows XP Home Edition"/nonexecute=option/ Is it supposed to read like that? while browsing that box I noticed the edit button and clicked on it just to see what was inside and I copied this: [boot loader]
timeout=0
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
This computer still lags very badly. While you and I were at work on it a couple of days ago I was only able to download a small version of java platform, I could never get the version you told me to download. I spent all day yesterday and all night last night trying to get the version you told me to get. Finally, at about 7:30 this a.m. the download was completed, I went to install it, and it said it was not a valid windows 32 application, which if my understanding is correct would mean the I simply didn't get a good download.
newbe 17
It is good to know that in this world we live in today there are still some really good people, Tom, and you are one of them. May you continue to let God bless you and guide your path. Thank you 
Need to get rid of Virtumonde and Win32.TDSS.rtk. but iv'e done the preventive steps in the "preventing malware" article u supplied and have online armor installed and running. When I rebooted after installing online armor firewall spy bot search and destroy ran a boot scan all by itself 
It found only 1 infection, the virtumonde, and for the second time this evening, said it had fixed the problem. So, here I sit 
newbe17