Search:

Okay great! Thanks so much for your time and assistance!

It looks like all I needed to do was delete it from the start/all programs list. It did not show up as a program in the uninstall programs list.

How did the last dds log look? Does everything...

An additional comment, under All Programs there is still a program in the list called Windows XP Recovery. When hovering the cursor over it it gives me two options: 1) uninstall Windows XP Recovery...

I updated my Java per your instructions. I uninstalled Combofix. I re-installed AVG and ran a full scan, it found no problems.

The machine seems to be running pretty smoothly now. The only...

I ran OTL and below is the resulting log. Also, the PC did not re-boot itself.

========== OTL ==========
========== FILES ==========
C:\Documents and Settings\Jeff Barbour\Application...

1) I uninstalled the IOBit Defragger as suggested.

2) I ran the MBAM. Here is the log:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6713

Windows...

I ran combofix as instructed. Below is the resulting log:


ComboFix 11-05-27.02 - Jeff Barbour 05/28/2011 15:22:11.1.2 - x86
Microsoft Windows XP Home Edition ...

All the programs are back! (No empty)! -

Here's the log after running OTL:

========== OTL ==========
========== FILES ==========
< xcopy %Temp%\smtmp\1 "%AllUsersProfile%\Start Menu" /H /I...

- I don't specifically recall running CCleaner before requesting help, but it is possible. I don't think I did though.

- Other than the (empty) problem, the PC still seems bogged down and it...

Below is the Gmer.txt log:

GMER 1.0.15.15627 - http://www.gmer.net
Rootkit scan 2011-05-26 21:26:36
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e...

Here is the MBAM log after the scan on 5-15:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6586

Windows 5.1.2600 Service Pack 3
Internet Explorer...

I ran unhide as instructed. Some of the programs are there, but others still say "empty". This includes microsoft office, spybot and others. I went ahead and re-ran unhide after turning off AVG,...

JonTom -

Thanks for the reply!

I was able to get my desktop screen back and run malwarebytes to remove a lot of windows recovery related malware. However, I believe I still may have some...

Is Windows Desktop Recovery a legitimate tool? I have no desktop screen, but was somehow able to run DDS. It is very difficult to do anything on this PC without the desktp, but here is the is DDS...

Excellent! Everything is going smoothly. Thanks again for your assistance. It is greatly appreciated!!

I downloaded OTC and ran it. OTC ran and a clean up file window popped up. I never saw a list of programs and my firewall/protection did not give me a message that it was trying to block anything. ...

Everything seems to be running great. Thanks so much for your assistance in getting this fix. I was able to uninstall combofix per your instructions.

However, I am not understanding your...

So far, so good! It appears to be running very smoothly and I think all the bad stuff is gone..

I take it the scan file shows the same?

yeah - I didn't want the ask toolbar - I followed your instructions and have posted the latest Combofix log below:

-------------------------------------
ComboFix 11-05-13.02 - Jeff Barbour...

great - the removal tool worked!

I ran Combofix. Here is the log:

---------------------------------

ComboFix 11-05-13.02 - Jeff Barbour 05/13/2011 18:47:46.1.2 - x86
Microsoft Windows...

Great! No rootkit!
However, I am running into a problem with combofix and AVG. I went to add/remove programs and uninstalled AVG. I then downloaded combofix and started to run it. Then I got a...

Here is the TDSSKiller log:

----------------------------
2011/05/13 16:47:29.0234 0696 TDSS rootkit removing tool 2.5.1.0 May 13 2011 13:20:29
2011/05/13 16:47:30.0031...

here is the latest run today:
---------------------------
DDS (Ver_11-03-05.01) - NTFSx86
Run by Jeff Barbour at 16:38:24.09 on Fri 05/13/2011
Internet Explorer: 8.0.6001.18702...

ken - I ran aswMBR this morning and I clicked the 'fix' button as you suggested. It appeared to be doing something, but then my desktop locked up. Not completely, but all I could do is move the...

Dan - I ran the defogger and got the 'finished!' message. However, it did not ask me to reboot. I did however reboot manually (should I have done that?). When the desktop came back up after the...

Dan - thanks so much for the help! Please see the below text pasted as well as attached:

-----------------------------------------------
aswMBR version 0.9.5.256 Copyright(c) 2011 AVAST Software...

Spybot has detected Click.GiftLoad and my PC is running really slow with random popups and the browser opening up random websites. I am at my wits end. This is the first time I've posted on a forum...