[SweetTech]

Okay, is it scanning your P.C. for files that need to be replaced?

[Advertisements]

can't really tell. there is window asking for disk i keep canceling. the other pop up shows a bar that it not really growing

[rupertdigby]

can't really tell. there is window asking for disk i keep canceling. the other pop up shows a bar that it not really growing

[rupertdigby]

as i continue to cancel the bar grows a little at a time

[SweetTech]

Okay, keeping on cancelling out of the messages.

We will have to use a different method.

[SweetTech]

We will need to download a program on your clean P.C. and then bring it over to the infected P.C. via Flash Drive.

File to download:

Download ComboFix from one of the following locations:
Link 1
Link 2

Running ComboFix

This part may be a little be tricky as you don't really have access to your desktop, so you will need to browse for the ComboFix file from your USB device.

You will need to launch Task Manager and then go to File > New Task (Run) > and browse for your USB device, and then the ComboFix file.

Hopefully you'll be able to run this tool successfully.


VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

• IMPORTANT - Disable your Anti-Virus and Anti-Spyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  
  Note: If AVG or CA Internet Security Suite is installed, you must remove these programs before using Combofix. If for some reason these applications will not uninstall, try uninstalling with AppRemover by Opswat.
  
• Double click on ComboFix.exe & follow the prompts.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

• Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

• Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.

Please make sure you include the ComboFix log in your next reply as well as describe how your computer is running now

[rupertdigby]

i'm downloading combfix to the flash drive directly then moving to laptop
i use avast on the laptop and i'm trying to deactivate it....????

[SweetTech]

i'm downloading combfix to the flash drive directly then moving to laptop

Yes

I don't believe we are going to be able to disable the avast for right now, so don't worry about that.

[rupertdigby]

the antivirus prog you are reffering to is on the laptop correct i can not see system tray to exit avast. right clicked a folder and scan with avast and pop up said avast not enabled but combo fix said it sees avast and not responsible if continuing

see window pop up blue screen says preparing to run, attempting to create system restore.
a
another pop up says looking for internet connection

completed stage 1-4 and stil going

is any of this good

[SweetTech]

Yes, from what your describing ComboFix is currently running, and will go through several stages in its run.

[rupertdigby]

is saying rebooting please wait. should i have removed the flash drive because the xpud is starting

[SweetTech]

I didn't even think of that being an issue.

You will need to reboot your computer without the USB device in, and wait until your computer loads before inserting it again.

Once it loads Press Ctrl+Alt+Del and then go to File > New Task (Run) > Browse > go to your Flash Drive. Find where the ComboFix file is and select it (one click) by right clicking on it and choosing Copy. You will want to Browse to your Desktop and paste the ComboFix file there by right clicking and selecting Paste.

Then you'll need to launch the ComboFix file again, and have it run.

Note: if your desktop should load then please report back informing me of such.

[rupertdigby]

blue screen when flash drive removed. same as last

[SweetTech]

The blue screen occurs when you try to boot up normally now?

[rupertdigby]

yes.

[rupertdigby]

can we xpud to get info or run combo fix?