perfs.exe found - need help to remove - hjt log

SnapDaddy, I'm thinking your ComboFix program must have gotten borked. Please drag your copy to your recycle bin. Then redownload from original links and attempt to run it.

Tomk, Success! Attached it the ComboFit log file.

SnapDaddy,

Cool.

Give this a try;

COMBOFIX-Script

• Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:
  
  

  Driver::
  MpKsl029bad8f
  MpKsl0b4c38c0
  MpKsl0bf037b7
  MpKsl2f80d370
  MpKsl6d02059d
  MpKsl981471cf
  MpKsl9d7a6e93
  MpKslab93f25d
  MpKslb8b07daf
  MpKslc2952402
  MpKsleac41939

• Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.
  
  [external image: Posted Image]
  
• Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
• Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
• ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
• When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

Are things running well?

OK Tomk, The script worked this time! Please find attached ComboFit.txt log. The computer does seem to be running better…still a bit of HD spinning during idly time, but doesn't seen to be as much as when I had MSSE install. What next? Did we get those Win32/Delf.PWG trojan in the restore points? Thanks, SnapDaddy

SnapDaddy,

We haven't yet… but we will now.

Log looks good


Time for some housekeeping

• Click START then RUN
• Now type ComboFix /Uninstall in the runbox and click OK.
• Note the space between the X and the U, it needs to be there.
• [external image: Posted Image]

The above procedure will:

• Implement some cleanup procedures.
• Reset System Restore.

Please re-enable any security that was disabled.


The following is my standard advice for the future. Use what you can and pat yourself on the back for what you're already doing.

Please take time to read Preventing Malware - Tools and Practices for Safe Computing. Very important information for your consideration is contained therein.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein


Also: "How to prevent malware"
by miekiemoes

Please respond back that you understand the above and let me know if you have any questions. Otherwise, this thread will be closed Resolved.

OK Tomk, I ran the ComboFix uninstall…all looks good. I read through the recommended links. Good stuff, I'll pass it on to my friends and family to read! I really appreciate your time helping me with this. I have a lot of respect for knowledgeable people like yourself volunteering your time helping out folks like myself! Take care! SnapDaddy

SnapDaddy, You are very welcome. Good Luck and Be Well.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.