Search:

There is no autorun.inf folder on the USB drive.

Bad sign?

I ran Flash Disinfector, the screen went blank as predicted, then after some time I got the following message:

"Registry editing has been disabled by the administrator."

That message must be...

The computer does not allow Flash Disinfector to proceed.

I have a question: if I connect a portable hard disk to the computer and transfer Word files on it, will it become infected?

I want to...

The situation is as follows:

- I ran the CFScript file through Combofix again -- the log of this is in my last post.

- I then ran Combofix scan again -- the log for this is below.

- The...

Done - here is the log, thank you!

ComboFix 10-03-28.03 - Ed 04/01/2010 18:36:45.10.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.767.465 [GMT -7:00]
Running from:...

I performed the combofix operation with the code you gave me. Combofix ran as normal, but the symptoms have not gone away. Additionally, when it was producing the log file, the screen went black. ...

The trick worked -- thanks!

Here is the Combofix log. The EXE files called "porn", "foto" and "data" are the ones that appeared from nowhere.

Thanks again!

ComboFix 10-03-28.03 - Ed...

When I try to run Combofix a message pops up saying "Combofix has encountered a problem and needs to close. We are sorry about the inconvenience."

What should I do?

Thanks!

I am posting new logs because my computer has acquired an additional virus and I thought I should post new logs before implementing the Combofix procedure you prescribed.

The additional symptoms...

Many thanks! The Combofix and DDS logs are below.

ComboFix 10-03-23.03 - J 03/24/2010 13:05:21.6.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.767.375 [GMT -7:00]
Running...

Many thanks for helping me! Find the 3 logs below.

--------------------------------

DDS log:


DDS (Ver_10-03-17.01) - NTFSx86
Run by J at 17:13:06.78 on Fri 03/19/2010
Internet...

My computer is infected with a regedit virus. I had to uninstall spybot because it no longer opened,
despite clicking on its icon. I repeatedly tried to uninstall Amazon Unbox (in case you wanted...

Did everything you suggested. Clean bill of health from MBAM.

Thanks for helping!

Oops - a typo - my mistake: I meant Internet Explorer OR Google Chrome.

The slowness started with the hideous infection. Maybe the registry is full of rubbish? This territory is way too advanced...

I will do all of that and report back, but I have a quick question first: why is my computer still so slow? There are no redirects now, but when I click on the Internet Explorer of Google Chrome...

Find the 3 logs below. Re: performance, at least there are no more popups and redirects now. Please tell me if I should reinstate TeaTimer.Thanks for helping!

ComboFix 09-05-06.02 - Admin...

ComboFix 09-05-06.02 - Admin 05/06/2009 14:59.4 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.767.492 [GMT -7:00]
Running from: c:\documents and...

I am confused about this Desktop issue - isn't HijackThis in a desktop folder? What must I do different?

Thanks for your patience :-)

I did everything you asked. The uninstall list and log file are below, thanks!

AbiWord 2.6.8
Acrobat.com
Adobe AIR
Adobe AIR
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Flash Player...

My computer is infected with win32.TDSS.rtk and neither Spybot nor every other program I tried is able to get rid of it. Find my log below - thanks :-)

Logfile of Trend Micro HijackThis v2.0.2...