Search:

Well, finally some success. I chose a restore point where I knew my computer was behaving correctly. Upon re-starting from the system restore, it said Windows could not start, and it ran the...

I am not following you. Are you saying there was malware on my computer? I only ask because we have not run any tools to remove anything. Also, the issue with not being able to run scandisk. If I...

I found this article:


http://www.thewindowsclub.com/check-disk-will-not-run-at-startup

Mine is different than what this article says it should be?

Well, that didn't work either. Startup Repair found no issues. Tried to run scandisk again, and got the same result. Scandisk sheduled, scandisk cancelled. So not sure what, if any, steps are...

Ok, I did what you said. Quick question How do I know if sfc /scannow is working/running? All that happened was a MS-DOS window appeared for about half a second, then went away. That's it.

Robybel-

Unfortunately I cannot even run the scandisk. I did everything you said, and rebooted. When I rebooted, it again asked which operating system I wanted to use. I picked Window 7, my...

I will replace the keyboard. Any idea why it would all of a sudden start asking me what operating system I want to use at start up?

Robybel:

Here is the screenshot you asked for. There is nothing under the drop down menu that says Windows 7. That is my only choice.

Robybel-

Thanks for the reply. So nothing in my logs looked amiss?

The main reasons I wasn't sure if it was hardware related or not is because:

1.) I can get it to stop typing the L, but...

Toshiba Satellite laptop. Windows 7 Home edition. We don't use this computer a lot, because of tablets, ipad, etc. However, my wife tried to use it this morning with some really strange results....

Please see this thread:

http://forums.spybot.info/showthread.php?t=61787

I had the BSOD issue where we thought it was overheating. Well, it blue after I turned it on after sitting overnight. ...

Well, when I went to turn on the computer last night, it loaded Windows normally. I let it run for a few hours. No BSOD, no restarts. The night before, I did remove the cover, and gave it a good...

I will do that this afternoon and post back results of BSOD. Thank you.

Blade-

The computer re-starts itself too quickly to read the BSOD. The restarts got exponentially worse yesterday, getting closer and closer together. Finally, around 8:00 last night, it would...

Hello, and sorry to be back. In the past week or so, when I would turn on my computer after sitting overnight, I would get an error message that Windows had recovered from a serious error. Now,...

Will do, and thanks so much.

Blade-
When I turned off the system restore and re-booted, Combofix was already gone off my desktop. Tried running the combofix/ uninstall anyways and it said windows could not find it.

Please see the attachment for a warning I got from McAfee saying I had another trojan. I did restart the computer as they said to do.

I got a WinPatrol message as soon as I re-started it. It says it has detected a change to one of my file type associations.

The program currently associated with this file type is:
Run a DLL as...

Running much better. I re-started Win Patrol and am no longer getting the warnings, nor do I see the rogue files even listed there anymore. I think ya nailed it. Will await final instructions for...

Whew! Ok, here are the logs you requested. Updated Java and Adobe as well. (I thought I had these configured to update automatically, but I guess not):

New ComboFix:

ComboFix 10-12-25.02 -...

Sorry for the delay. As requested:

COMBOFIX

ComboFix 10-12-25.01 - bilotta 12/25/2010 15:32:33.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1525 [GMT -5:00]...

Thank you Blade. An update since I posted. I was able to run Spybot S & D, and it found Virtumonde.prx. The only reason I ran it before you were able to reply was because of Winpatrol. At least...

My wife was on a retailers website when all hell broke loose. All of a sudden, a defragmenter icon was in the system tray. It also had an error in the system tray that said "Critical Error-Hard...

Thanks so much for your help Ken. One final question. When I reactivated McAfee, it immediately identified ComboFix as a trojan, and removed it. Therefore I was not able to remove it per your...

Thanks so much Ken. Will await your final all clear before finishing up. (Removing all the programs we downloaded etc.)

Sounds good. I have not had any random browsers pop up since I did the ESET scan. One quick question that you may or may not be able to answer. I have heard rumors that the games people play on...

Yes, I was surprised as well. The last one I had to zip and attach. The only thing I unchecked was IAT/EAT. C:\\ was checked. I had to run it in safe mode, and it took over two hours. Did I do...

Latest GMER:

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-06-25 15:36:37
Windows 5.1.2600 Service Pack 3
Running: gmer.exe; Driver: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\awxoqpow.sys...

Ken-
Strange. I tried running GMER again, but it rebooted my machine before it finished, therefore I could not save the log. It did not do this last time. Any ideas?

Much better. No random browsers, and google seems to be working fine. I will run GMER as instructed previously and post results immediately.

Ken,
When I run GMER again, is the Sections Tab the only one you want checked? Or do I follow your directions from the last time I ran it?

New ComboFix:

ComboFix 10-06-24.03 - Owner...

Ken-
Thought there might still be an issue. When I clicked on the link for the ESET scan, I did get another random browser. Anyways, here is the latest log you requested:

TDSS KILLER
...

Thanks Ken. Here are the results from ESET:

ESET

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=8.00.6001.18702...

Here is the actual file from gmer. I compressed and attached to avoid confusion. Will run eset now.

Also, yes, I did have AVG installed at one point, but did remove it. McAfee is what I now use. Once you deem my computer clean, I do have another question you may or may not be able to answer, but...

Continued..

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-06-24 17:36:01
Windows 5.1.2600 Service Pack 3
Running: gmer.exe; Driver: C:\DOCUME~1\Owner\LOCALS~1\Temp\awxoqpow.sys

...

Ken,
That was strange. After I ran the GMER rootkit scanner, I saved the file as instructed. When I tried to connect to the internet, it brought me to a blue screen, and it asked me how I wanted...

Disabled McAfee. When I ran Combofix, I got a strange error message. It said:
"Error Win 32. Incompatible OS. Combofix only works with Windows 2000 or XP." I have XP.

While I was writing down...

Something else just happened. I posted my post. I clicked on the Home link of this website. Another browser opened. This one wanted me to buy Windows Registry Defender. Not sure if it's...

Hi Ken, and thanks for the reply. I download ATF and ran it as instructed. I already had Malwarebytes on my computer, so I updated to latest release and ran a quick scan. See results below. Also,...

Well, unfortunately I am back. My step daughter was using the computer last week, and it appears I have something lurking in the shadows. I am experiencing google re-directs, and clicking on a...

I just wanted to give a shout out and huge thank you to IndiGenus. This was the first time I had ever had to deal with anything like this, and not only was his patience appreciated, but the easy to...

Thanks again. Will run Kaspersky and report back tomorrow if anything pops up (it takes a few hours for a full scan). If I don't post tomorrow, please go ahead and close this thread. Thanks so...

And then do this?

Click Start>Run and type Cleanmgr
Click the More Options Tab.
Click Clean Up in the System Restore section.

Should I scan with Kaspersky after that? Sorry for all the...

I reset the system restore. However, when I do Start>Help I get an Hewlett Packard help screen. It does have a support button, but no Undo? Am I doing something wrong? I didn't go any further...

Dave-
After your last post two days ago, I downloaded Spyware Blaster, WinPatrol, and the trial, but fully functional, Kaspersky Internet Security 2010. I ran a scan just for peace of mind, and...

One last thing, lol. Is there good software you recommend, in addition to WinPatrol and Spyware Blaster, that would serve as my anti-virus and firewall? I don't care if it's free or not, I just...

I went to see if it had indeed cleared all the restore points, and it said system restore had been turned off. It asked if I wanted to turn it back on. Waitng for your go-ahead, I said no. Also,...

One other thing. When you had me uninstall Norton yesterday (which I thought it was), I got a warning that I didn't have a firewall. So for the time being I enabled the Windows firewall. Once we...