[Closed] one messed up pc

friend calls me tells me his pc is messed up. When he goes in IE it opens a window and quickly closes. I tell him to bring it to me and I'll take a look. Sure enough he's right. I also see that his McAfee won't update. I then double click My Computer and it's messed up too. Will not show drives, it changes screen modes a couple times and finally ends up with the white Restore Active Desktop screen. I've got all the goodies to start fixing this pc but don't know where to start as I can't actually run any programs it appears. I did run Smithfraud in Safe Mode. Tried ATF cleaner and it went nonresponsive. Help.

Hi! Welcome to the WTT forums.
My name is Scotty. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research.
Please be patient.




Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :

• Restart your computer
• After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
• Instead of Windows loading as normal, the Advanced Options Menu should appear;
• Select the first option, to run Windows in Safe Mode, then press Enter.
• Choose your usual account.

• Open the extracted SDFix folder and double click RunThis.bat to start the script.
• Type Y to begin the cleanup process.
• It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
• Press any Key and it will restart the PC.
• When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
• Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
  (Report.txt will also be copied to Clipboard ready for posting back on the forum).
• Finally paste the contents of the Report.txt back in your next reply.

Thanks Scotty. It'll have to wait till I get home, my work firewall won't allow me to download your file. Will report back with the log results asap.

Downloaded and installed SDfix. rebooted in Safe Mode, and the message box stating Windows is in Safe mode and asks if you wish to proceed, Yes or No, flashes by quickly with a beep and disappears before I can select yes or no. The black Safe Mode screen then just hangs and does not give me a desktop. I then tried booting into Safe Mode with networking, and this time the message windows stayed on screen and allowed me to click Yes. Desktop came up and I executed Runthis.Bat. The program loads but the screen is frozen. Doesn't allow me to type Y or anything at all. Mouse is frozen, Numlock on keyboard is frozen, etc. Did I mention this is one messed up pc?

yoo hoo, Scotty. any suggestions how to get around frozen safe mode?

Hi

Youll have to use the power button, if everything is frozen. Then boot into Normal Mode and try this program.


Download and Save ComboFix

• Download this file from below:
  
  Here
  
• Save it to your Desktop.
• Disconnect from the Internet, than disable your anti-virus and any real-time anti-spyware monitors that are running.
• Then double click combofix.exe & follow the prompts.
• When finished, it shall produce a log for you. Post that log in your next reply with a new HijackThis log.

Note 1: Do not mouseclick combofix's window whilst it's running. That may cause it to stall
Note 2:Remember to re-enable your anti-virus and anti-spyware before reconnecting to the Internet.

Due to inactivity this topic will be closed. If you need help please start a new thread and post a new HJT log