[stephm77]

Hi there,

For the past few weeks now I have been unable to download anything - from emails to programmes etc. For example, I'll click open/save on an email attachment, it'll say it's downloading and as soon as it downloads it says "This program contained a virus and was deleted." I've been searching on google for answers and tried to download Malware, Firefox etc but of course the same thing happened. I use internet explorer and Microsoft Security Essentials as my anti-virus.

Please help! Let me know if you need more information (and how I can get it because I'm not that techno-literate)

Thanks!

[Advertisements]

Hi there do you have a USB drive and access to another computer ?
Are you able to access safe mode with networking

Reboot the computer and repeatedly press F8
Does a menu appear
If so select safe mode with networking
Then try to download the following programme to your desktop

Download OTL to your Desktop
Secondary link

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  
  
  
• Select All Users
• Under the Custom Scan box paste this in
  
  netsvcs
  BASESERVICES
  %SYSTEMDRIVE%\*.exe
  /md5start
  services.*
  explorer.exe
  winlogon.exe
  Userinit.exe
  svchost.exe
  winsock.*
  /md5stop
  CREATERESTOREPOINT
  
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Post both logs

If that fails then download the following programme to the USB
Copy to the desktop of the infected system
You may need to run it several times to get it to work, do not close any virus popups that appear

• Download RogueKiller and save it on your desktop.
  
  NOTE: If using IE8 or better Smartscreen Filter will need to be disabled
  
• Quit all programs
• Start RogueKiller.exe.
• Wait until Prescan has finished ...
• Click on Scan

• Wait for the end of the scan.
• The report has been created on the desktop.
• Click on the Delete button.

• The report has been created on the desktop.

• Next click on the ShortcutsFix
  
• The report has been created on the desktop.

Please post: All RKreport.txt text files located on your desktop.

[Essexboy]

Hi there do you have a USB drive and access to another computer ?
Are you able to access safe mode with networking

Reboot the computer and repeatedly press F8
Does a menu appear
If so select safe mode with networking
Then try to download the following programme to your desktop

Download OTL to your Desktop
Secondary link

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  
  
  
• Select All Users
• Under the Custom Scan box paste this in
  
  netsvcs
  BASESERVICES
  %SYSTEMDRIVE%\*.exe
  /md5start
  services.*
  explorer.exe
  winlogon.exe
  Userinit.exe
  svchost.exe
  winsock.*
  /md5stop
  CREATERESTOREPOINT
  
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Post both logs

If that fails then download the following programme to the USB
Copy to the desktop of the infected system
You may need to run it several times to get it to work, do not close any virus popups that appear

• Download RogueKiller and save it on your desktop.
  
  NOTE: If using IE8 or better Smartscreen Filter will need to be disabled
  
• Quit all programs
• Start RogueKiller.exe.
• Wait until Prescan has finished ...
• Click on Scan

• Wait for the end of the scan.
• The report has been created on the desktop.
• Click on the Delete button.

• The report has been created on the desktop.

• Next click on the ShortcutsFix
  
• The report has been created on the desktop.

Please post: All RKreport.txt text files located on your desktop.

[stephm77]

Hi there,

Thank you for your reply - I tried downloading both OTL and itxassociates and the same thing happened - "this program contained a virus and was deleted" so I wasn't able to run anything I do have access to another computer and a USB drive - what should I do?

Thank you for your help!

[Essexboy]

OK we will go in outside of windows.. What operating system do you have ? XP, Vista , 7 or 8
If Vista or better is it 32 or 64 bit

[stephm77]

Hi there,

It's Windows 7, 64-bit

[Essexboy]

OK could you use another computer to create the bootable USB

Download the following three programmes to your desktop :

1. WiNTBootIc
2. Windows 7 64bit RC
3. Farbar Recovery Scan Tool x64

Extract wintoboot to your desktop
Insert a USB drive of at least 1GB
Run Wintoboot



Drag and drop the Windows 7 ISO to the programme in the space indicated
Tick the Format box and accept the warnings
Press Do It

You will see it progressing



It will let you know when it is done
Then copy FRST to the same USB




Insert the USB into the sick computer and start the computer. First ensuring that the system is set to boot from USB
Note: If you are not sure how to do that follow the instructions Here


When you reboot you will see this although yours will say windows 7. Click repair my computer


Select your operating system


Select Command prompt


At the command prompt type the following :

notepad and press Enter.
The notepad opens. Under File menu select Open.
Select "Computer" and find your flash drive letter and close the notepad.
In the command window type e:\frst64.exe and press Enter
Note: Replace letter e with the drive letter of your flash drive.
The tool will start to run.
When the tool opens click Yes to disclaimer.

Press Scan button.
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

[Essexboy]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.