Hi Deception35, welcome to the forum.
To make cleaning this machine easier
Please do not uninstall/install any programs unless asked to Please do not run any scans other than those requested Please follow all instructions in the order posted All logs/reports, etc.. must be posted in Notepad. Please ensure that word wrap is unchecked. In notepad click format, uncheck word wrap if it is checked. Do not attach any logs/reports, etc.. unless specifically requested to do so. If you have problems with or do not understand the instructions, Please ask before continuing. Please stay with this thread until given the All Clear. A absence of symptoms does not mean a clean machine. When i tried to post it went to a page saying my internet was down. Sry
That sometimes happens, I'll remove your additional topics.
Please download
DeFogger to your
desktop .
Double click
DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OK DeFogger will now ask to reboot the machine - click OK IMPORTANT! If you receive an error message while running DeFogger, please post the log
defogger_disable which will appear on your desktop.
Do not re-enable these drivers until otherwise instructed.
I see you have
aswMBR on your computer. Please run a scan with it and post the log and attach the
mbr.zip that is also produced.
To run aswMBR:
Right click the aswMBR.exeand click "Run as Administrator" to run it
Click the "Scan" button to start scan
[external image: Posted Image]
On completion of the scan click save log, save it to your desktop and post in your next reply
[external image: Posted Image]
There shall also be a file on your desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) folder. Please attach that zipped file in your next reply.
Next
Please open OTL.
Make sure all other windows are closed and to let it run uninterrupted. When the window appears, click the None In the window under Custom Scans/Fixes Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open a notepad window,
OTL.Txt . Please post this log.
Please post back with
aswmbr log OTL.txt mbr.zip (attached)
Thanks
Thanks for the quick response. Im running the MBR test now. B4 i got your reply i re -installed firefox. i dont know if thats a big deal or not. Also i just got a BSOD while running the scan so im re running it now.
aswMBR log OTL.txt ========== Custom Scans ========== < %USERPROFILE%\..|smtmp;true;true;true /FP > < %temp%\smtmp\*.* /s > < MD5 for: EXPLORER.ADML > < MD5 for: EXPLORER.ADMX > < MD5 for: EXPLORER.EXE > < MD5 for: EXPLORER.EXE.MUI > < MD5 for: EXPLORER.EXE-7A3328DA.PF > < MD5 for: IEXPLORE.EXE > < MD5 for: IEXPLORE.EXE.MUI > < MD5 for: WINLOGON.ADML > < MD5 for: WINLOGON.ADMX > < MD5 for: WINLOGON.EXE > < MD5 for: WINLOGON.EXE.MUI > < MD5 for: WINLOGON.EXE-8163EECC.PF > < MD5 for: WINLOGON.MOF >
Did i upload eveything u asked?
Also ive been gettin Redirected to a site saying ive won a prize. just happend
Hi Deception35,
Download
ComboFix from one of these locations:
Link 1 Link 2 * IMPORTANT !!! Save ComboFix.exe to your Desktop Disable your AntiVirus and AntiSpyware applications , usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note : If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs Right click on ComboFix.exe, click Run as Administrator & follow the prompts.
When finished, it shall produce a log for you. Please include the
C:\ComboFix.txt in your next reply.
Notes:
1.
Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3.
CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely , the connection can be manually restored by restarting your machine.
Please post back with the
combofix log .
Thanks
I try to run ComboFix but it keeps saying Avg Free anti virus is running but i dont even have that on my computer anymore. So i dont know what to do
Hi Deception35,
Go ahead and run it.
I've been running it for a half hour now and its still running is that normal?
Is there any harddrive activity at all? What is displayed on the screen?
It says
Scanning for infected files…
This typically doesn't take more then 10 minutes
However, scan times for badly infected machines may easily double.
That's all it says
Hi
Ok it seems it may have stalled. Restart your computer. Delete the copy you have and download a new one from
Link 1 or
Link 2 to your Desktop. Please read these instructions before you down load it.
If you are using Firefox, make sure that your download settings are as follows: During the download, before you save it to your desktop, rename Combofix to svchost.exe It is important you rename Combofix during the download, but not after. Please do not rename Combofix to other names, but only to the one indicated. Close any open browsers. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix ———————————————————–
Very Important! disable your anti-virus , script blocking and any anti-malware real-time protection before "unpredictable results" .Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask. ———————————————————–
Right click on ComboFix.exe (svchost.exe in your case) and click "Run as Administrator" & follow the prompts.
When finished, it shall produce a log for you. Please include the
C:\ComboFix.txt in your next reply.
Notes:
1.
Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty
and terminates prematurely , the connection can be manually restored by restarting your machine.
Please post back with
How is the computer?
Thanks
.
Wow i just looked at main page and for some reason it made like 10 posts. no idea how that happend . When i tried to post it went to a page saying my internet was down. Sry