[RopingAngel]

Virus symptoms.....I can not run malwarebytes or superspydoc, microsoft security essemtials has been shut down and I get google redirects, today after of a week now of being infected, I am getting page not responding for about 2 min before I can navigate. I am getting slightly desperate as this is my work computer. I am on my laptop right now and not the infected computer. Thanks!!

[Advertisements]

Hi and welcome to GeeksToGo! Please make sure you read all of the instructions and fixes thoroughly before continuing with them. If you have any queries or you are unsure about anything, just say and I'll help you out

It may well be worth you printing/saving the instructions throughout the fix, so you have them to hand just in case you are unable to access this site.

Please note:

• Remember to post your logs, not attach them. So, any logs from any programs we run, should be just 'copied & pasted' into your reply.
• Please only run the tools that I request. I know malware can be frustrating but running other tools in the meantime and between posts, only makes it harder for us to analyse and fix your PC in the long run.
• Please subscribe to this topic if you have not already done so. Please check back just in case, as the email system can fail at times.
• Just because your machine is running better does not mean it is completely cleaned. Please wait for the 'all clear' from me to say when we are done.
• Please reply within 3 days to be fair to other people asking for help.
• Please tell me if you have your original Windows CD/DVD available
• When in doubt, please stop and ask first. There's no harm in asking questions!

If you have since resolved the original problem you were having, I would appreciate you letting me know. If not please perform the following steps below so I can have a look at the current condition of your machine.

Step 1

• Please download aswMBR.exe to your desktop.
• Double click the aswMBR.exe to run it.
  
  
  
• When asked if you want to download Avast's virus definitions please select Yes.
• Click the Scan button to start scan.
  
  
  
• On completion of the scan click Save log, save it to your desktop and post in your next reply.
• Also in Desktop there should be a file called MBR.dat after that, zip it and then attach it here

Step 2

OTL Custom Scan

• Download OTL to your desktop.
• Double click on the icon to run it.
• Make sure all other windows are closed and to let it run uninterrupted.
• When the window appears, underneath Output at the top, make sure Stadard output is selected.
• Select Scan all users
• Under the Extra Registry section, check Use SafeList
• Check the boxes beside LOP Check and Purity Check.
• Under the Custom Scans/Fixes box copy and paste this in:
  
  

  netsvcs
  %SYSTEMDRIVE%\*.exe
  /md5start
  explorer.exe
  winlogon.exe
  Userinit.exe
  svchost.exe
  /md5stop
  %systemroot%\*. /mp /s
  hklm\software\clients\startmenuinternet|command /rs
  hklm\software\clients\startmenuinternet|command /64 /rs
  CREATERESTOREPOINT

• Click the button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic

When completed the above, please post back the following in the order asked for:

• aswMBR log
• OTL scan log
• Extras log
  

[Render]

Hi and welcome to GeeksToGo! Please make sure you read all of the instructions and fixes thoroughly before continuing with them. If you have any queries or you are unsure about anything, just say and I'll help you out

It may well be worth you printing/saving the instructions throughout the fix, so you have them to hand just in case you are unable to access this site.

Please note:

• Remember to post your logs, not attach them. So, any logs from any programs we run, should be just 'copied & pasted' into your reply.
• Please only run the tools that I request. I know malware can be frustrating but running other tools in the meantime and between posts, only makes it harder for us to analyse and fix your PC in the long run.
• Please subscribe to this topic if you have not already done so. Please check back just in case, as the email system can fail at times.
• Just because your machine is running better does not mean it is completely cleaned. Please wait for the 'all clear' from me to say when we are done.
• Please reply within 3 days to be fair to other people asking for help.
• Please tell me if you have your original Windows CD/DVD available
• When in doubt, please stop and ask first. There's no harm in asking questions!

If you have since resolved the original problem you were having, I would appreciate you letting me know. If not please perform the following steps below so I can have a look at the current condition of your machine.

Step 1

• Please download aswMBR.exe to your desktop.
• Double click the aswMBR.exe to run it.
  
  
  
• When asked if you want to download Avast's virus definitions please select Yes.
• Click the Scan button to start scan.
  
  
  
• On completion of the scan click Save log, save it to your desktop and post in your next reply.
• Also in Desktop there should be a file called MBR.dat after that, zip it and then attach it here

Step 2

OTL Custom Scan

• Download OTL to your desktop.
• Double click on the icon to run it.
• Make sure all other windows are closed and to let it run uninterrupted.
• When the window appears, underneath Output at the top, make sure Stadard output is selected.
• Select Scan all users
• Under the Extra Registry section, check Use SafeList
• Check the boxes beside LOP Check and Purity Check.
• Under the Custom Scans/Fixes box copy and paste this in:
  
  

  netsvcs
  %SYSTEMDRIVE%\*.exe
  /md5start
  explorer.exe
  winlogon.exe
  Userinit.exe
  svchost.exe
  /md5stop
  %systemroot%\*. /mp /s
  hklm\software\clients\startmenuinternet|command /rs
  hklm\software\clients\startmenuinternet|command /64 /rs
  CREATERESTOREPOINT

• Click the button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic

When completed the above, please post back the following in the order asked for:

• aswMBR log
• OTL scan log
• Extras log
  

[RopingAngel]

Hello! I can't seem to get my computer to do anything at all now! I got this virus on Monday and I had bleepingcomputer.com helping me and...well...I got hold of real winner...he would not get back to me and everything he had me try did not work... anyway, it has seem to get a lot worse now! I can not even get a internet connection now! What should I do?

[RopingAngel]

Can I do all this in Safe Mode? Will it let me connect? I am not doing anything until I her from you! Thanks!

[RopingAngel]

OMG!! now my lap top has a trojan BHO, I thought I was getting some redirects and realized this afternoon I now have a virus on this computer too! I downloaded malwarebytes and ran a scan, it found the trojan BHO, I removed it but it did not work! Maybe we can fix the one we were working on above first and then move to this one? I will donate twice as much??...LOl!! I am just sick and beside myself! I need these computers for work! Ugh !! I can get to this site through my email but can not use a search engine.

[Render]

You are already receiving help here at Bleepingcomputer so please stay there. I will close this thread.

[RopingAngel]

But the person helping me will has not responded to any of my last post, I have been waiting for days? I think they forgot about me! lol...Should I find somewhere else to go?....Thanks

[Render]

Well. He responded yesterday as I can see here.

[RopingAngel]

The date says the 21st today is the 23rd that is not yesterday? I guess I am just anxious because I need my computer for work and I am at a total stand still for 5 days! I just hated to bring my computers to a local IT Guy, because it takes so long to fix, (2 weeks) last time I used geeks to go, I had the best help ever! The responses were like they really cared! I was trying to find geeks to go again and got on bleepingcomputer and thought it was the same? Which I guess there is a connection? I was not trying to be mean or hasty about the person helping me at bleepingcomputer, I am just so terribly desperate. We can close both threads and I will find another solution, I am sorry for the trouble! Thanks!

[Render]

This forum is sometimes very busy and it can take up to 5 days to get a response. Patience please.