flashh4

Let me know if they come back after the OTL cleanup ?? And you can remove/delete any programs we used in the cleaning ! How's it running ? Got just a little to do after i hear from you !! Chuck

Ok lets do some cleanup !! Clean up with OTL Right-click OTL.exe and select " Run as administrator " to run it. This will remove all the tools we used to clean your pc. Close all other programs apart from OTL as this step will require a reboot On the OTL main screen, press the CleanUp! button Say Yes to the prompt and then allow the program to reboot your computer. You can now delete any tools we used if they remain on your Desktop. Reboot & tell me how it's running and any other problems you have !! Chuck

What 9 documents ??

Try re-booting ! Never had that happen before !

Go to add/remove and uninstall: if present >>> SpySweeper We need to Run an OTL fix !! Warning This fix is only relevant for this system and no other, using on another computer may cause problems. Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot * Double-click OTL.exe to start the program. * Copy and Paste the following code into the . text box of the OTL tool/program ! Start with and include the colon plus OTL . :OTL :OTLDRV - File not found [Kernel | On_Demand | Stopped] --

Hey treasured the TDSSKiller came out clean, i think we are gonna get it clean !! Chuck Now the OTL log !!

Howdy sweetie4850 and welcome to BestTechie !!! My name is flashh4 (Chuck) and i will be assisting you with the cleaning of your computer. Run these 1 at a time & post each log as you get it ! Work them as your time permits you to !! If you don't understand something, please don't hesitate to ask for clarification before proceeding !!! You can PM me if you need to !! Do Not Remove anything or run any tools/programs until advised to do so ! Perform all actions in the order given. Please stay with us until we give you the "All Clean Speech"! Just because the problem has stopped it m

Will be popping in and out i guess today, honey do's !! MS Windows maliicious software removal tool <<< this is sometimes a fake program that try's to sell you other software ! I think we delete/remove it !! Chuck

looking a lot better ! Lets see if we got anymore of Zero or its exploits left !! Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do. We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option. Download >>> http://support.kaspersky.com/downloads/utils/tdsskiller.zip <<< and save it to your Desktop. * Extract its contents to your desktop. * Once extracted, open the TDSSK

MS Windows maliicious software removal tool <<< when did or where did you get this ! Lets just leave it alone for now ! Very busy this morning so i will have some more for you shortly,

Hi Treasure, no it's not odd when you have been at this as long as i have 11 yrs. And we have to keep up on all the new infections & which tools to use and it goes on and on for us ! The difference is RogueKiller killed it & removed it or most anyway ! We will see soon if it got it all !! Chuck

Treasur did you remove these that were installed ?? If not go to add/remove uninstall any found there !! If you can find them we will remove in a few minutes !! The install of these was from a different site than where i sent you to get Farbar but it's ok ! Continue with my last post above please !! Chuck

Hey treasured, AFTER the RougeKiller log has been posted, please run these for me. The Combofix program may at times seem frozen but it's just running, so be careful with it is a very powerful program use it exactly as shown in my instructions ! This can take 30 minutes or more to run, so get a cup coffee and wait ! Vista and Windows 7 users: 1. These tools MUST be run from the executable. (.exe) every time you run them 2. With Admin Rights (Right click, choose "Run as Administrator") Download ComboFix from this location: Link 1 http://download.bleepingcomputer.com/sUBs/ComboFix.exe L

Woods, send the Malwarebytes log when you get time ! Then i need you to run these AFTER the Malwarebytes log is posted ! Security Check Please download and save SecurityCheck.exe to your Desktop from one of the links below. Link 1 >>> http://screen317.spywareinfoforum.org/SecurityCheck.exe. Link 2 >>> http://screen317.changelog.fr/SecurityCheck.exe * Double click SecurityCheck.exe and follow the onscreen instructions inside the black box. * A Notepad document should open automatically called checkup.txt * Please post the contents of that document in your

Ok sounds good !! we will continue tomorrow ! Thanks

Do you know what programs they wanted you to install ?? I'm sure we will see them in another log later !! Chuck

Ok lets try this another way !! You should have RougeKiller installed !! Open RogueKiller : * Quit all programs that you may have started. * Please disconnect any USB or external drives from the computer before you run this scan! * For Vista or Windows 7, right-click and select "Run as Administrator to start" * For Windows XP, double-click to start. * Wait until Prescan has finished ... * Then Click on "Scan" button * Wait until the Status box shows "Scan Finished" * click on "delete" * Wait until the Status box shows "Deleting Finished" * Click on "Report" and copy/paste the content of

No no money !! Remove/delete it !

Good it will be pretty long !! So if you have to break it up, thats ok ! Chuck

Good start woods, it should clean up pretty good when we are done !! Post other logs when you get them ! Thanks Chuck

No it shouldn't !! There are 2 version of Farbar, only 1 will run on your system !!

urtreasured, let get after this nasty thing !! Please download Farbar Recovery Scan Tool and save it to your Desktop. >>> http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. You will need FRST64 * Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens cl

All your ms documents i.e. word, excell, pdfs should be just fine, i will see them in some of the logs if they are infected !! Ok i be right back with a start of this bad infection !! I am retired so will be around all the time, mostly ! Chuck

Thanks for posting this here so we can keep everything as a record here ! Ok it's good that there is no banking done ! We can try & clean this, i think we can clean this up pretty good, hopefully an all clean ! That sound good to you ? Chuck

Howdy woodshopfun and welcome to BestTechie !!! My name is flashh4 (Chuck) and i will be assisting you with the cleaning of your daughters computer. Run these 1 at a time & post each log as you get it ! Work them as your time permits you to !! If you don't understand something, please don't hesitate to ask for clarification before proceeding !!! You can PM me if you need to !! Do Not Remove anything or run any tools/programs until advised to do so ! Perform all actions in the order given. Please stay with us until we give you the "All Clean Speech"! Just because the problem has st