Welcome to Geeks2Go tukangsomay,
For your laptop, let's take a look. For your friend's laptop, you will need to open a new thread for it. It sounds like they have a fake warning infection that is failing to load correctly (malware).
For your laptop, if the system is Vista/Windows7, when running any of the scan files we use, be sure to right click the file, then select "Run as administrator" to start the scan/tool.
And To make sure you have an accurate view of files there, make sure you can View Hidden Files
. Also uncheck "Hide Extensions for Known File Types"
To keep them from interfering with the repairs, be sure to temporarily disable all antivirus/anti-spyware softwares while these steps are being completed. This can usually be done through right clicking the software's Taskbar icons, or accessing each software through Start - Programs. Here
are some antivirus disable tips if needed.
and download OldTimer's OTL
to your desktop, then click that to open the scan display. At the top click "Scan All Users
", then click "Run Scan
". Make no other changes at this time.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are also saved in the same location as OTL.exe. Post the contents of those back here please.
and download the installer for Gmer to your desktop, then click that file to run Gmer.
Once the opening scan finishes, click on Scan
(again, before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while this scan completes. Also do not use your computer during the scan).
When completed, click on the Copy button and rightclick on your Desktop, choose "New" > Text document. Once the file is created, open it and rightclick again and choose Paste. Copy the information and post it here please.
to your desktop.
Close all open programs
Remember to right click -> run as administrator, and click the downloaded file.
Wen RogueKiller finises it's opening scan, press the Scan button..
A RKreport.txt will be created in the same location as the RogueKiller file.
If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe, and try again.
Please post the contents of the RKreport.txt.
A lot, but comprehensive, and will make sure we get a good view of everything.