sarahw

Hi, Locate your Windows installation CD. Go to Start, then to Run, and type in SFC.EXE /SCANNOW Then press Enter. The program may (or it may not) ask you for your Windows XP installation CD - please insert it at the prompt. 1. Close any open browsers. 2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. 3. Open notepad and copy/paste the text in the quotebox below into it: Save this as CFScript.txt, in the same location as ComboFix.exe Refering to the picture above, drag CFScript into ComboFix.exe When finished, it shall produce a

Thats what the USA is paid to do. Countires allow US ships and planes into their territory for this reason. Like Saudi Arabia gets weapons, technology and an alliance for allowing US troops in their borders. This speeds the US communications and logistics to suit the end needs. Its like psudo-colonialism.

Looking good. Can you please zip this folder for me: C:\Qoobox Do not touch the folder contents. Go to this link, fill in your username and the link to this thread, then click on browse and locate the file you zipped on your computer, then click on "send file".

1. Close any open browsers. 2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. 3. Open notepad and copy/paste the text in the quotebox below into it: Save this as CFScript.txt, in the same location as ComboFix.exe Refering to the picture above, drag CFScript into ComboFix.exe When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

1. Go to this link, fill in your username and the link to this thread, then click on browse and locate this file on your computer (if you cant find it, copy and paste it into the right field), then click on "send file". c:\program files\lalalala.exe 2. Right click Here and select Save As to download WinHelp2002's DelDomains.inf. Please save the file somewhere you can find it like on the desktop. To run the inf file, right click on it and select Install. 3. 1. Close any open browsers. 2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboF

c:\winnt\system32\svchost.exe is infected. It is a system file that the computer needs. Locate your Windows installation CD. Go to Start, then to Run, and type in SFC.EXE /SCANNOW Then press Enter. The program may (or it may not) ask you for your Windows XP installation CD - please insert it at the prompt. When it has finnished, post another combofix log.

Hi, Its starting to look good. Can you please rescan with combofix.

Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below. O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis. Reboot into safe mode. Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode. Using Windows Explorer (to get there right-click your Start button and go to "Explore"), please delete these fold

Did you check the item in Hijack This or Delete it using the "Delete An NT Service" option?

Write down that link. Reboot the computer. When the computer starts to boot, keep tapping F8 untill you see a list of options. Choose Safe Mode with Networking. (Do not stay on Safe Mode with Networking longer than neccessary). Open Internet explorer and go to that website to download Combofix.

Just a reminder to post in this thread. I merged the other one into here.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/combofix/how-to-use-combofix * Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. Please include the C:\ComboFix.txt in your next reply for further review.

Hi, I'm having a look now and will reply in a moment.

Can you please post the log of that malware bytes scan then run MBAM again and post that log also.

ok, Download this: http://subs.geekstogo.com/ComboFix.exe run it. Do not use the comuter while it is scanning, it will produce a log in notepad when it is finnished. So not mouse-click anything while it is scanning either. Post the log in a reply when you have finnished.

Could be the hard drive, is it working hard? any noises? Software/OS errors? check event veiwer. Obviously no malware or you'd know. Check the performance monitor, hows the cpu and ram going. Paging? Virtual memory? Also, check the temps, overheating can slow you down.

ok, Open HiJackThis Click on the "Open Misc Tools Section" click on "delete an NT service" Copy and paste this in: õóÎļþ Click "ok", then reboot

Hi, Please download Malwarebytes' Anti-Malware from Here. Double Click mbam-setup.exe to install the application. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If an update is found, it will download and install the latest version. Once the program has loaded, select "Perform Quick Scan", then click Scan. The scan may take some time to finish,so please be patient. When the scan is complete, click OK, then Show Results to view the results. Make sure that everything is checked, and click Remove Selected. When d

Hi, I removed the codebox. No need for anything fancy I can see Mysql is still on the computer, uninstall it if you dont need it. Please download Malwarebytes' Anti-Malware from Here. Double Click mbam-setup.exe to install the application. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If an update is found, it will download and install the latest version. Once the program has loaded, select "Perform Quick Scan", then click Scan. The scan may take some time to finish,so please be patient. When the scan is co

Hi, Please click Start, then Run and type msconfig then press enter. Click on the services tab. Tell me if you can find: õóÎļþ or something using this file: C:\WINNT\gfsse11452s.bat If you can, unselect it then click OK. Post another Hijack This log.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/combofix/how-to-use-combofix * Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. Please include the C:\ComboFix.txt in your next reply for further review.

Inactive topic... If you still need help on this problem, contact me or one of the Moderators to re-open this up. Topic closed.

Inactive topic... If you still need help on this problem, contact me or one of the Moderators to re-open this up. Topic closed.

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Inactive topic... If you still need help on this problem, contact me or one of the Moderators to re-open this up. Topic closed.