[neataznyam]

theres no cure button theres, graphics mode, start shell, start midnight comaner, start dweb scanner, start dweb update, create liveusb, select language, xorg config, network config, report bug, restart, shut down, eject and shut down.

I went to dr web scanner then when it was finished it said push any button and so I did and it brought me back to the menu

[Advertisements]

Did Dr.Web found anything? Maybe there was nothing to remove.

Please download

 UnHookExec.zip   407bytes   115 downloads

UnZIP it to your desktop
Right click on UnHookExec.inf and click on Install.
Accept all prompts

Try to run EXE files now and let me know results.

[maliprog]

Did Dr.Web found anything? Maybe there was nothing to remove.

Please download

 UnHookExec.zip   407bytes   115 downloads

UnZIP it to your desktop
Right click on UnHookExec.inf and click on Install.
Accept all prompts

Try to run EXE files now and let me know results.

[neataznyam]

still nothing

[neataznyam]

don't think it installed, even tried in safe mode

[maliprog]

Except EXE files, do you see any error messages or anything out of order that can help us diagnose problem.

Can you please try to create new user account. Log in on that new user account and try to run any program. You can create new user account following This article.

[neataznyam]

well when I run internet explorer it makes me use blekko as a homepage and when I use google and try to click on a page it redirects me to an ad page but that's only when I have used google but I havn't tried it with yahoo. I havn't seen error messages but the little icons I used to have on the lower right hand side of my task bar are gone except for the volume. Certain programs that would normally load up in the beginning don't

[neataznyam]

can't create a new user account but I can allow a guest account

[neataznyam]

said windows couldn't connect to the sens service

[maliprog]

If you can start Internet Explorer can you download new Combofix and rename it as iexplore.exe (Note that there are NO r at the end iexplorer.exe). Try to run it like this maybe we full malware.

If you don't manage to run it can you try to open ESET online scanner in Internet Explorer.

Please run a free online scan with the ESET Online Scanner
Note: You will need to use Internet Explorer for this scan

• Tick the box next to YES, I accept the Terms of Use
• Click Start
• When asked, allow the ActiveX control to install
• Click Start
• Make sure that the options Remove found threats and the option Scan unwanted applications is checked
• Click Scan (This scan can take several hours, so please be patient)
• Once the scan is completed, you may close the window
• Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
• Copy and paste that log as a reply to this topic

[neataznyam]

I can't download anything from that computer. It goes to 100% and has an error message

[maliprog]

Hi neataznyam,

Please try to download Combofix on your clean PC and rename it as iexplore.exe then try to run it on infected PC.

If you can't start ESET it's OK. Leave it for now.

[neataznyam]

well combofix didn't work

[neataznyam]

couldn't install active x, I'm wondering if we can set up an appointment where we can work on this back to back because I really need the computer next week, I'm in California so I don't know what your timezone is.

[maliprog]

That's too bad. I'm Europe +1h. I won't be able to do this until monday. I'll see what I can do for yo in mean time.

[RKinner]

This is Ron. maliprog asked me to look at your system since I'm in the same time zone. Could I see a new OTL so I can see where we are?

Can you get into a Command Prompt?