[Resolved] my windows defender says everything is fine

Hi, ok I tried again and the fixme.reg was not on my desktop i went to start and typed it in the search box and then right clicked it and created a shortcut that way. Anyway when I did that I douple clicked and all it did was bring notepad back up so i closed that and right clicked on the fixme.reg icon and clicked on merge and it did the same thing there was no information bar that popped up just the notepad withh what you wanted me to copy in it. Am I doing something wrong or is it the computer because I still see that message saying rundll32 was closed. Or is that how it should be and i should go on to the next step?

Hi,

when you saved the fies in notepad

did you see these icons appear on your desktop?

[external image: Posted Image]
[external image: Posted Image]


If not - then they didn't save correctly.


Let's look for that random 8 digit file in another location


Please go to C:\ProgramData and see if you can find a random 8digit file there - if so drag it to your desktop (don't delete it)

then see if you can get combo-fix to run

No they did not and I went and looked for the folder and there was no ProgramData folder. Do you want me to try any of the other programs you wanted me to do or still try to get this up because its not working. I did what you wanted me to do I click Start I type Run in search box i click on it then open it up and type notepad click ok and notepad pops up. After that I copied the selection you wanted me to do and paste it in the box then, type in fixme.reg in file name and selected all files and clicked ok and nothing showed up I dont no what is wrong I make sure there is no blank space in the top and there is one after. I dont no what to do?

Hi,

The malware on your system is preventing you from saving anything to your desktop.

we need to try another approach


Did you download and save Combo-Fix to your desktop as instructed previously?


Please tap into safe mode: Then run Combo-Fix


To Enter Safemode

• Go to Start> Shut off your Computer> Restart
• As the computer starts to boot-up, Tap the F8 KEY repeatedly,
• this will bring up a menu.
• Use the Up and Down Arrow Keys to scroll up to Safemode
• Then press the Enter Key on your Keyboard
• go into your usual account

I was not able to do the first link it closes it up when I click on it and, the second link opens up in spanish. Is there a different way for me to open it up or if I cando it from the spanish website let me know where to go.

Hello HMH22,

There does seem to be an issue with the second link. I'd like you to try the following…

Right click the link below, and select 'Copy shortcut'

http://www.forospyware.com/sUBs/ComboFix.exe

Now open a new tab in Internet Explorer, right click in the address bar and select 'paste'.

You should see a Download box pop up. Do not click Run, click Save. Rename the file to Combo-Fix.exe before you save it, and instead of saving it to your desktop, save it directly to the C:\ drive.

Let us know if Combo-Fix.exe saved successfully before you continue.

Hi, ok i renamed it and how do i save it to the C:\Drive and do I keep for the save as type Application or change to All files. I have not saved it yet it is still up.

Look at the very top of the Save dialog box, where it says 'Save In' and there is a path there. Click the little gray arrow to the right of that and a dropdown box will appear. Look toward the top and you'll see the C:\ drive. Click it once and it should now be the path you see next to 'Save In' At the bottom of the save box, do not change the file type. It should say Application - leave it as such. Click OK. On your keyboard, press the Windows Logo key and the letter E to open Windows Explorer. Go to the C:\ drive and look for Combo-Fix.exe Do you see it there?

Ok I saved it and it is in the C:\Drive

Wonderful!

Before we run Combo-Fix, we need to disable your Iolo Security so it does not interfere with the tool.

Open System Shield 3 Internet Security

• From the main System Shield interface, click the Security Tools button located under the Spyware and System Vulnerabilities panel.
• From the drop down menu, select Configure Automatic System Defense. The System Guard - Tools to Protect PC Settings window will appear.
• Click the Uninstall System Guard button located under the section labeled General.
• Click Yes to confirm the uninstallation and restart your computer

.
Now please navigate once again, to C:\Combo-Fix.exe and double click to run it. Follow the prompts and when it has finished, please post the contents of the C:\ComboFix.txt

If you run into any difficulties, stop what you're doing, post here with the issue, and await further instruction.

Ok a disclamier came up on the warranty of the software saying it not affilated with combofix should I still proceed with it or not.

Yes, please do

Ok I ran it how do I know its finished because right it its not doing anything the administrator box is still up.

Can you please be more specific? In the command box, you would have seen stages rolling by. What stage is ComboFix at?

Hi, ok the last stage it was on was Deleting Files about 1 minute after I posted it closed out and restarted the computer now there is an administrator box Find3M and it says its preparing log report but, before it did anything there was a error in program message that came up I exited out of it and now it still has not done anything.