[omiemiemie]

I tried downloading reimage repair, spybot and sdfix first, but I can't run them.. This winspool.drv not designed to run on Windows or it contains an error "bad image" keeps on appearing.. I can't open my firefox, safari, skype, excel, notepad, and other files because of this..

I think the virus was acquired on a pc shop where we tried to print for a file.. Luckily, internet is still accessible through internet explorer.. I tried OTL and all the versions was not working..

Exehelper.com worked though, and saved a log, but can't open it because the winspool.drv error doesn't want me to open notepad.. I tried to attach it here though.. Maybe you can read it.. Need help removing this malware.. That's why I am here.. Hoping to get a response.. Thank you..

-using windows vista if that info helps..
Edit: also using a compaq presario cq50-209nr notebook if that helps..

Attached Files

•  exehelperlog.txt   414bytes   179 downloads

Edited by omiemiemie, 04 January 2014 - 11:08 PM.

[Advertisements]

Hi omiemiemie,



My name is Valinorum and I will be the acolyte today. Before we proceed, please, acknowledge yourself the following(s):

• Please do not create any new threads on this while we are working on your system as it wastes another volunteer's time. If you are being helped/have solved the issue/no longer wish to continue, notify me in your reply and I will quickly close this thread. Failing to comply will result in denial of future assistance.
• Please do not install any new software while we are working on this system as it may hinder our process.
• Malware removal is a complicated process so don't stop following the steps even if the symptoms are not found. Keep up with me until I declare you clean.
• Please do not try to fix anything without being ask.
• Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.
• Please print or save the instructions I give you for quick reference. We may be using Safe mode which will cut you off from internet and you will not always be able to access this thread.
• Back up your data. I will not knowingly suggest your any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.
• If you are confused about any instruction stop and ask. Do not keep on going.
• Do not repeat the steps if you face any problems.
• I am not an omniscient. There are things even I cannot foresee. But what I know took years to learn and perfect the skill. This site is run by volunteers who help people in need in their own free time. I would ask you to respect their time and be patient as sometimes real life demands our time and replies to you can be delayed.
• Privet Message(PM) if and only if I have not responded to your thread within three days or your query is offtopic and personal. Do not PM me under any other circumstances. Your thread is the only medium of communication.
• The fixes are for your system only. Please refrain from using these fixes on other system as it may do serious damage.

Note: Please, bare in mind that I am still a trainee and my replies need to be reviewed by my teachers before I post them to you which requires time as both teachers and helpers are volunteers here. Take it as a good thing because now you have two people examining your problem. I really hope that we will be able to send you home with a smile on your face.

 

I ask for your forbearance as I plan a fix for your. Also, never attach the log as it makes them hard to construe.

Regards
Valinorum

[Valinorum]

Hi omiemiemie,



My name is Valinorum and I will be the acolyte today. Before we proceed, please, acknowledge yourself the following(s):

• Please do not create any new threads on this while we are working on your system as it wastes another volunteer's time. If you are being helped/have solved the issue/no longer wish to continue, notify me in your reply and I will quickly close this thread. Failing to comply will result in denial of future assistance.
• Please do not install any new software while we are working on this system as it may hinder our process.
• Malware removal is a complicated process so don't stop following the steps even if the symptoms are not found. Keep up with me until I declare you clean.
• Please do not try to fix anything without being ask.
• Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.
• Please print or save the instructions I give you for quick reference. We may be using Safe mode which will cut you off from internet and you will not always be able to access this thread.
• Back up your data. I will not knowingly suggest your any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.
• If you are confused about any instruction stop and ask. Do not keep on going.
• Do not repeat the steps if you face any problems.
• I am not an omniscient. There are things even I cannot foresee. But what I know took years to learn and perfect the skill. This site is run by volunteers who help people in need in their own free time. I would ask you to respect their time and be patient as sometimes real life demands our time and replies to you can be delayed.
• Privet Message(PM) if and only if I have not responded to your thread within three days or your query is offtopic and personal. Do not PM me under any other circumstances. Your thread is the only medium of communication.
• The fixes are for your system only. Please refrain from using these fixes on other system as it may do serious damage.

Note: Please, bare in mind that I am still a trainee and my replies need to be reviewed by my teachers before I post them to you which requires time as both teachers and helpers are volunteers here. Take it as a good thing because now you have two people examining your problem. I really hope that we will be able to send you home with a smile on your face.

 

I ask for your forbearance as I plan a fix for your. Also, never attach the log as it makes them hard to construe.

Regards
Valinorum

[Valinorum]

Hi omiemiemie,

• Step #1
  • Click on Start
  • Click on All Programs >> Accessories
  • Right-click on Command Prompt and select Run as Administrator.
  • Click on Continue in the UAC prompt.
  • At the Command Prompt C:\Windows\System32> type in the following exactly:
  • cd c:\
  • Then depress the Enter/Return key, then type in the following exactly:
  • sfc /scannowNote: The is a space between c and /
• Then depress the Enter/Return key.

Note: This may take awhile to finish. When completed close the Administrator Command Prompt window, via typing Exit then depress the Enter/Return key.
 

• Step #2 Scan with OTL
  Delete your current copy of OTL.
• Please download OldTimer's Listit from one of the following locations and save it to your Desktop.
  Download Link 1
  Download Link 2
  Downlaod LInk 3
• Copy and Paste the following code inside the Custom Scans/Fixes box;
  

  netsvcs
  BASESERVICES
  %SYSTEMDRIVE%\*.exe
  dir "%systemdrive%\*" /S /A:L /C
  /md5start
  services.*
  explorer.exe
  winlogon.exe
  Userinit.exe
  svchost.exe
  /md5stop
  CREATERESTOREPOINT

• Click the Quick Scan button;
• After the scan two logs will be produced;
• Copy and paste the content of the logs in your next reply

 

• Required Log(s):
• OTL.txt;
• Extras.txt

Regards,
Valinorum

[omiemiemie]

Thank you for your response Valinorum.. Unfortunately I already gave it for other people to do so I won't be able to do as you ask.. I'm still thankful for your kind response.. Kindly close the thread as you please.. Forgive me it took this long since I was also busy..

[Valinorum]

Roger.

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.