[Phel]

Hey,

I haven't heard from you for 2 days. Do you still need help? Or do you have a stuck/questions about previous set of instructions? If so, feel free to ask them here, I'm glad to help you with it.

[Advertisements]

Hi,

I cant seem to get the options listed in your reply when i press f8 all i get is a choice of what to boot from. I never had any disks when i got the computer either. Not sure what to do next =/

[raps1355]

Hi,

I cant seem to get the options listed in your reply when i press f8 all i get is a choice of what to boot from. I never had any disks when i got the computer either. Not sure what to do next =/

[Phel]

Hello,

Not sure what to do next =/

Ignore my previous step.

I see that you haven't installed antivirus on your computer. That could be a reason, why malware is coming back. What Antivirus software would you like to install? If you won't be able to access it's site, I will re-upload installer to you. So, please decide, what antivirus product would you like to use and inform me.

[raps1355]

I dont know which ones are any good. I have tried avg but it cripples my pc's running speed so i would like to avoid that if possible. I am looking for one that can run without interupting anything i am doing. (i dont mean when the actual scan is running)

[Phel]

I am looking for one that can run without interupting anything i am doing.

I think that Microsoft Security Essentials would be a nice choice for you.

Okay, I'll change my tactics now. We won't install antivirus now. Seems that I know, what infection you have. It can infect executable files, Office documentas and HTML files on your computer. So, it may be a reason, why malware is coming back. Let's try to deal with that using Kaspersky Virus Removal Tool.

Please note, that scan could take much time.

• Download the program distributive.
• Run the downloaded file setup_<build_number>_<date>_<time>.exe (example setup_9.0.0.722_22.01.2010_10-04.exe)
• Wait till the program unpacks temporary files.
• In the lower part of the welcome window select the required language to use during the installation.
• Read the license agreement and check the I accept the license agreement option.
• Click the Start button, to launch the application.
• Go to the Settings tab marked with an asterisk image.
• Select the Scan scope section.
• Pick a tick near all the locations, excluding floppy and CD-ROM drives.
  
  
  
• Go to the Automatic Scan tab.
• Click the Start scanning button.
• Wait until the scan is over.
• After that go to the Reports tab with the image of a list
• Select Detected threats section.
• Click Save button.
• Window with choice of location should pop up. Save the log on your Desktop under name log.txt. You should post contents of this file in your next message.
• Now click Disinfect all button. Computer will be rebooted automatically.

[Phel]

Hey,

I haven't heard from you for 4 days. Is scan still running or do you have any problems with instructions?

[raps1355]

Hi,

Sorry just been busy not had time to look at the computer, when i click the download it just keeps moving the page from the earth to the folder and no green bars are moving.

[Phel]

Okay, try this now.

Download Dr.Web CureIt.

• Doubleclick the p83v9x45.exe file to open it.
• A window will open offerring a choice of EPM or Standard Mode
• Chose EPM
• A license and updates window will appear. If necessary update, otherwise go to the wrench at the top right and check the box Automatically apply actions to threats.
• Check the box "I agree to participate..." and click Continue
• You will not be able to use your computer until the scan is finished. It generally takes only a short time say... around 15/20 mins.
• Dr Web will scan your computer. When finished close Dr Web.
• A report is saved to C:\Documents and Settings\Joe\Doctor Web named cureit.log. Copy and paste the contents back here.

[Phel]

Hello,

Were you able to download CureIt?

[raps1355]

Yes i ran it but when i tried to paste the log it takes a very long time then when i hit post it goes to an internet error page.

[Phel]

Try uploading Dr.Web log here and post the link to uploaded file in your next message.

[raps1355]

http://ge.tt/7E5vrYs/v/0

[Phel]

Okay, for that tool you will need a blank CD disc.

Please print these instruction out so that you know what you are doing.

• Download OTLPEStd.exe to your desktop
• Ensure that you have a blank CD in the drive
• Double click OTLPEStd.exe and this will then open imgburn to burn the file to CD
• Reboot your system using the boot CD you just created.
  Note : If you do not know how to set your computer to boot from CD follow the steps here
• As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads
• Your system should now display a Reatogo desktop.
  Note : as you are running from CD it is not exactly speedy
• Double-click on the OTLPE icon.
• Select the Windows folder of the infected drive if it asks for a location
• When asked "Do you wish to load the remote registry", select Yes
• When asked "Do you wish to load remote user profile(s) for scanning", select Yes
• Ensure the box "Automatically Load All Remaining Users" is checked and press OK
• OTL should now start.
• Press Run Scan to start the scan.
• When finished, the file will be saved in drive C:\OTL.txt
• Copy this file to your USB drive if you do not have internet connection on this system.
• Right click the file and select send to : select the USB drive.
• Confirm that it has copied to the USB drive by selecting it
• You can backup any files that you wish from this OS
• Please post the contents of the C:\OTL.txt file in your reply.

[raps1355]

Hi Phel,

Sorry I have left it so long without replying. I have been busy and forgot about it. In the end the computer packed up and doesn't boot up now but I want to say thanks for all your help on trying to fix this as I did get some improvement while using these instructions. Feel free to close this thread down.

[Phel]

Okay, thank you for letting me know.

Sorry that I wasn't able to figure out this case. Good luck and safe web to you!