[pystryker]

Hi, can you try running Dr. Web again, but just using a single monitor? Dr. Web may not be able to run on a dual monitor system. Please give that a try and let me know if that works.

[Advertisements]

Hi, I get the same results running on one monitor.

[averysadman]

Hi, I get the same results running on one monitor.

[pystryker]

Hi, let's try a different tool for scanning in Safe Mode then.

Note: This tool will scan only, it will not delete anything without a fixlist that I will provide if anything is found in the log.

Please follow my instructions below.



For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
• Use the arrow keys to select the Repair your computer menu item.
• Select English as the keyboard language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account an click Next.

To enter System Recovery Options by using Windows installation disc:

• Insert the installation disc.
• Restart your computer.
• If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
• Click Repair your computer.
• Select English as the keyboard language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account and click Next.

On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt[*]Select Command Prompt
[*]In the command window type in notepad and press Enter.
[*]The notepad opens. Under File menu select Open.
[*]Select "Computer" and find your flash drive letter and close the notepad.
[*]In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.
[*]The tool will start to run.
[*]When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.[/list]
Things I need to see in your next post:

FRST Log

[pystryker]

Hello

It's been 3 days since my last set of instructions were posted. Do you need further assistance with the scan?

[averysadman]

Are these system recovery options really necessary for a virus scan?

[pystryker]

Are these system recovery options really necessary for a virus scan?

All the scans on your machine have come back clean, no malware at all. The only problems I see on your machine are the ones pointed out earlier (out of date programs, out of date service pack, etc) in Post #4. You may run the scan if you wish, and I will be happy to review the log for you, but I must say, I don't believe you have a keylogger hiding on your system.

[averysadman]

Hi, sorry for the slow replies, I'm having some unrelated problems with my ISP.

If the scans we ran so far have been clean and I've not experienced any more issues, we can probably write this one off as solved. If have any more problems I know where to come.

Thanks again for your time and patience.

[pystryker]

Hi, sorry for the slow replies, I'm having some unrelated problems with my ISP.

If the scans we ran so far have been clean and I've not experienced any more issues, we can probably write this one off as solved. If have any more problems I know where to come.

Thanks again for your time and patience.

You're very much welcome, glad we could help you out.

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.