[jlperalc]

ok thank you Bruce for all your help,I'm starting to think this Trojan is possessed, jejejjeje  Have a good evening, See you tomorrow. By the way, my name is Joy. 

[Advertisements]

Hi Jlperalc

Ok.here we go! Just to recap.
You have downloaded FRST and FRST64.exe to the flash drive.
The flash drive is plugged in to the infected computer.
On the infected computer you are in the recovery environment and have opened a command prompt.

On the infected computer what screen do you see at the moment?

[Bruce1270]

Hi Jlperalc

Ok.here we go! Just to recap.
You have downloaded FRST and FRST64.exe to the flash drive.
The flash drive is plugged in to the infected computer.
On the infected computer you are in the recovery environment and have opened a command prompt.

On the infected computer what screen do you see at the moment?

[jlperalc]

Good afternoon Bruce, 

The screen that popped out when I opened the command prompt says Administrator :windows\system32\cmd.exe on the top as a title 

inside it says Microsoft Windows (version 6.3.9600)

and its waiting for my command .. 

[jlperalc]

Bruce I tried it again and this time it passed 

[jlperalc]

waiting for your next instruction .yey...  

[Bruce1270]

Ok. are you seeing the FRST screen like below?

[jlperalc]

yes, and I did the scan already 

[jlperalc]

the box says under whitelist: registry, services, drivers, known dlls and where it says optional sca it says list bcd, drivrs MDS and  90 days files

[Bruce1270]

Excellent. Well done you!!

Once the scan completes it will generate a log on the flash drive called FRST.txt. Please copy and paste this into your next reply.

[jlperalc]

ok explain this, I got a little bit confused... 

[Bruce1270]

Ok. If the scan has completed there should be a log on the flash drive called FRST.txt. It opens in Notepad. Is there a file opened called FRST.txt or can you see this on the flash drive?

[jlperalc]

ok, so I know that it opened a log in notepad, that is what I need to copy and then that is what I'm going to paste as a command? 

[Bruce1270]

Ok. what might be easiest is unplug the drive and move it over to the computer you are replying from. Browse to the flash drive and double click on FRST.txt. It will open in notepad. Then click on Edit and then select all. Then click CTRL + C to copy.
In the topic in your next reply click ctrl + V keys to paste the content of the log into your reply.

[jlperalc]

ok the file that you wanted is this one... 

Attached Files

•  FRST.txt   33.89KB   151 downloads

[Bruce1270]

Good stuff. That's what I need.

Ok. I'll start looking over this and preparing a fix for you.