[750steve]

Re ran the scan for the 3rd time & when i reboot again i cant open the log file, this is confusing me!! I just get the pointer & a spinning blue circle that spins for a few secs then stops.

There are now 20 'things' in Quarantine

This is the log file before the reboot

Attached Files

•  mbam-log-2010-12-13 (23-37-00).txt   1.64KB   222 downloads

[Advertisements]

Okay, go ahead and proceed with the rest of the instructions in my previous post.

[SweetTech]

Okay, go ahead and proceed with the rest of the instructions in my previous post.

[750steve]

The infected computer wont oped IE now though.

[SweetTech]

Hello,

Please run an OTL fix for me:

OTL Fix

We need to run an OTL Fix

• Please reopen on your desktop.
• Copy and Paste the following code into the textbox.
  
  

  :Services
  :OTL
  
  :Reg
  [-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\nvcpldaemontool]
  :Files
  C:\Users\Ryan\rloadBA.dll
  C:\Users\Ryan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scanvdiskk13.dll
  C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scanvdiskk13.dll
  C:\Windows\System32\config\SystemProfile\rloadBA.dll
  C:\Users\Ryan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scandisk.lnk
  C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scandisk.lnk
  ipconfig /flushdns /c
  :Commands
  [purity]
  [resethosts]
  [CreateRestorePoint]
  [emptytemp]
  [EMPTYFLASH]
  

• Push
• OTL may ask to reboot the machine. Please do so if asked.
• Click .
• A report will open. Copy and Paste that report in your next reply.
• If the machine reboots, the log will be located at C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, where mmddyyyy_hhmmss is the date of the tool run.

NEXT:



Lets see if that helps with things at all.

Edited by SweetTech, 13 December 2010 - 06:03 PM.

[750steve]

Finally......im posting from the laptop!!!

OTL log (it wouldnt let me run OTL 4 times & i rebooted every time!!)

Attached Files

•  12142010_001817.log   5.26KB   201 downloads

[750steve]

Hmmmmmm..... now i cant get onto the net through IE, it seems to be random wheather i can open anything or not be it programmes or a browser??? This is weird


When i was on the net using the laptop i tried to use the ESET online scanner (after i posted the OTL log above), i couldnt use it & even though i was running as admin i couldn't download the file at it wouldnt let me accept the security warnings (a red 'x' appeared in the top right of the pop up window)

I did however manage to download Security Check by screen317 though it would not let me run it.........i rebooted a couple of times & it is now currently running though i still cant open IE.

You must be thinking im doing something wrong but im doing the same things every time & sometimes the action is allowed & sometimes not............you cant really get 'double clicking' on an icon to open a programme wrong!!

This thing is doing my head in!!

[750steve]

Okay, small update. I went back to the laptop this morning & the black command screen from Security Check by screen317 was still there, i have no idea if it was complete but it had been running for 4 houes.

A small 'flash window' appeared & said that it had found my public folder (STEVIE-PC), thats my desktop so am i right in assuming my wireless now works?

ESET online scan is now running as well as i could get onto the net


WEIRD!!!

[750steve]

Here is the ESET Scanner log..........i still cant get the MBAM logs from last night though, are they important?

Attached Files

•  ESETScan.txt   625bytes   251 downloads

[SweetTech]

Hello,

That ESET Online Scanner is showing me something that may provide us with the answer we are looking for.

Run this tool:


Running TDSSKiller

Please read carefully and follow these steps.

• Download TDSSKiller and save it to your Desktop.
• Extract its contents to your desktop.
• Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  
  
  
  
  
• If an infected file is detected, the default action will be Cure, click on Continue.
  
  
  
  
  
• If a suspicious file is detected, the default action will be Skip, click on Continue.
  
  
  
  
  
• It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  
  
  
  
  
• If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
• If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

[750steve]

Sorry, the laptop is running really slow & freezing, i thing thats why some programmes are taking so long to load!

Service pack 2 was installed as well

Here in the TDSSkiller report (taken from my flash drive as the laptop screen froze when accessing this forum)

Nothing found

Attached Files

•  TDSSKiller.2.4.11.0_14.12.2010_18.02.48_log.txt   61.62KB   199 downloads

Edited by 750steve, 14 December 2010 - 12:10 PM.

[SweetTech]

Hello,

Run this scan:

HAMeb_Check Scan

Download and run HAMeb_check.exe

Post the contents of the resulting log.

[750steve]

All i get is a blue box &

"This tool is not compatible with your system"
"Press any key to continue"

the blue box then disappears when i press a key

[SweetTech]

Try right clicking on the tool, and selecting Run as Administrator, to see if that will work for you.

[750steve]

No, still the same thing...............i thought i had a blonde moment there!!



Reboot?

Edited by 750steve, 14 December 2010 - 12:31 PM.

[SweetTech]

Hello,

Please press the Windows key + R. You should see a Run dialog box appear.

Copy/Paste the following followed by enter:

cmd /c mbr -t > "%userprofile%\Desktop\mbr.txt"

Please post the mbr.txt in your next reply.