[slmitten]

I have been trying to clean my brother-in-laws laptop with AVG, Ad aware & Kaspersky.
Still having Problems.
I am unable to get Malwarebytes, Mcafee,spybot & hijackthis to run
Toshiba laptop running XP
Upon booting getting many apps with "has encountered a problem and needs to close"

Verify class ID
McAfee Spamkiller server
Image mastering API
cfsserv.exe
run a dll as an app
toscdspd.exe
Toshiba power saver
smoothview
synaptics touchpad enhancements
padexe.exe
tfncky
McAfee Task Scheduler
swupdtmr.exe
toddsrv.exe
fax service
McAfee WSC Integration service

All of these encountered a problem at boot.

I am currently rerunning AVG Scan which is not complete but it shows
Trojan Horse SHEUR2.OOX
Trojan Horse Geneeric12.BRSJ
Virus Win32/ Huer
I have already run AVG scan a few times and thought stuff had been cleaned.
I really need some guidance....
Thanks.

[Advertisements]

Hi slmitten,

Welcome to Geeks to Go! My name is SpySentinel and I will be helping you fix your computer problem.
Sorry for the delay, we have been very busy lately, and I apologize for your wait.




Download ComboFix from one of these locations:

Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  
  
• Double click on ComboFix.exe & follow the prompts.
  
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:




Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

[SpySentinel]

Hi slmitten,

Welcome to Geeks to Go! My name is SpySentinel and I will be helping you fix your computer problem.
Sorry for the delay, we have been very busy lately, and I apologize for your wait.




Download ComboFix from one of these locations:

Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  
  
• Double click on ComboFix.exe & follow the prompts.
  
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:




Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

[slmitten]

I tried to run Combofix but it would never start.
After seeing "Verify Class ID has encountered a problem and needs to close" several times
windows shutdown and restarted.
Now I am having recursive rebooting.

[SpySentinel]

Try this, delete ComboFix, then


Download Combofix from any of the links below. You must rename it before saving it. Save it to your desktop.

Link 1
Link 2





--------------------------------------------------------------------

Double click on Combo-Fix.exe & follow the prompts.

• When finished, it will produce a report for you.
• Please post the C:\ComboFix.txt along with a HijackThis log so we can continue cleaning the system.

[slmitten]

When executing the file combo-fix app I now get several verify class id encountered a problem and needs to close
errors and a few "freeware implementation of reg.exe encountered a problem .
Then I see " Incompatible OS. combofix only works for workstations with windows 2000 & XP.
My OS is XP Home (I believe SP2 but I am unable to get my computer properties to show status...just get that
verify class id error)

[SpySentinel]

Plug in a usb mouse and then use start --> run --> type in...msconfig... enter...start tab...and uncheck everything

Then reboot

*You will need the usb mouse because your touch pad will not work when you reboots

[slmitten]

I had to reboot to get the usb mouse to be seen.
Tried to run "msconfig" and nothing happens...
The same can be said when I tried to run regedit.. nothing happens.

[SpySentinel]

Looks like you have many windows files corrupted... I believe you are so infested it may be quicker and easier to repair xp.

Go HERE
to learn how to repair your computer.


Let me know how it goes.

[slmitten]

It would appear that my brother-in-law cannot find any of the CDs that came with the laptop.
What would you suggest that I try and do next ?
Thanks....

[SpySentinel]

You will have to borrow a copy from friend, family or coworker...
HAS TO BE the same flavor..if the system has xp pro...then the version you borrow needs to be the same

[SpySentinel]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.