Search:

Redcar,

Thank you and your colleagues SO MUCH for all the hard work and assistance you put into fixing these stubborn issues on my machine. I truly, honestly appreciate all the help you have shown...

Thank you so much, again. That worked!

Have we reached the end of this long road now?

--Ryodin

Finally finished running the ESET scan. No threats were found! :rockon:

--Ryodin

Here is the log from the MBAM scan:

=========================================================
Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Database version: 7640

Windows...

Thank you, thank you, thank you! :D: That seemed to do the trick! Both corrupted files of OTL are gone now. There are no more. The only suspect file left is the Spybot one.

I'll download and run...

One more thing. You asked me to keep Malwarebytes and ESET, but I don't believe I have these. Where can I get them?


--Ryodin

I was able to remove everything from off your list except for that OTL.exe file which is in the OTL2 folder. I forgot to mention that I had yet another bad OTL.exe file in another folder:...

The reboot in Safe Mode didn't do the job. So I clicked on the first link and couldn't quite follow what the instructions were asking me to do. The Security Tab it speaks of doesn't appear in my...

Okay, I downloaded Revo Uninstaller. Unfortunately, it does not list SpyBot under the list of installed programs on my machine. Yet the file is clearly there in my "Program Files" folder on the C:...

Okay, I ran OTL to remove that msert.exe file -- and it worked! Now if only I could use this to remove those corrupt OTL.exe files, too! :D:

Here is the log:
...

Yes, I ran the uninstall for Spybot first, but it could not get rid of the folder in the "Program Files" folder on my C: drive. The uninstall only removed Spybot from my desktop and Start -->...

Thanks, redcar. I came to the same conclusion myself. I'll try the links you've provided.

As for the files, they are .exe files including a Spybot S&D program that cannot be deleted from the...

Okay, I tried the solution you linked to and ran the tool successfully. According to that, the problem was detected and fixed. But of course, lo and behold it was not. I'm still getting the same...

Okay, I will give this a try when I get home from work later today and reply here when I'm done.

Thanks a lot, redcar!

--Ryodin

I don't know why I didn't get a notification of your reply until this morning. So, sorry for the delayed response.

I've tried several reboots, and have downloaded the updates both from the sys...

It turns out I already have Dial-a-fix on my desktop from quite a few years ago when I had a problem with my Windows updates before. So I used that version instead, which was also v. 0.60.0.24.

It...

Thanks for your concern, redcar! We survived Irene perfectly fine here in the big city. Much ado about nothing, really. Outlying areas didn't fare nearly so well, I'm afraid.

The McAfee problem...

It took two more attempts, but it finally went through!

Here are the results of the scan:


=========================================================
File name: SbcpHid.sys
Submission date:...

Thank you. We're keeping safe. I was finally able to get the site working again, but it is VERY slow. Right now I've been stuck on the file loading status screen for 5 minutes. My Internet connection...

I'm trying to access the VirusTotal site, but it seems to be down. I was able to access it once, select the file, and then hit submit. But suddenly the site stopped loading at that point and I...

And here is the 3rd and final leg of this log:


========================================================
C:\Program Files\internet explorer\iexplore.exe[3416] ADVAPI32.dll!RegCreateKeyExW ...

Seems I will need to split this into 3 parts -- it's that long!

I think I should have mentioned before, but I've had my machine for almost 8 years now. In that time I think I've accumulated a lot...

Sorry for the delay. It took nearly 7 whole hours for the program to scan through everything, but I finally have a log for you.

I'm being told that the log is too long to paste in one post, so I...

Okay, here is the log:


=========================================================

Run from C:\Documents and Settings\David Batista\Desktop\maxlook.exe on Fri 08/26/2011 at 19:46:43.90
...

Never mind, I think I got it now. Will post a follow-up reply shortly.

Okay, I have a question already.

When running Maxlook, after asking me to restart my machine and boot into the Recovery Console, it prompts me to "press any key to continue". I pressed the key,...

My sincerest thanks goes out to all of you working on this problem. I am aware of the tremendous help you and your colleagues are providing me.

I will begin running the processes you outlined...

Okay, done. Thank you.

I'll await further instructions.

--Ryodin

Yes, when rebooting my PC and putting it in Safe Mode, I did in fact notice an option to launch the Revovery Console.

Before I do anything else, what about the McAfee security warning? I've left...

Well, looks like it didn't take long to run at all. ComboFix has finished. After all 50 stages cleared, it suddenly rebooted my PC. After the reboot, it generated a log, which I will paste below.
...

I'm running ComboFix now, so this could take several hours. In the meantime, how do I know if the Recovery Console has been installed? In all the times I've run ComboFix, I don't believe I've ever...

I haven't run any programs on my own ever since starting this thread, other than the ones Redcar had me run.

I thought we came across something called Zero Access a while back, during one of the...

Here are the results of the latest aswMBR scan:


=========================================================
aswMBR version 0.9.8.978 Copyright(c) 2011 AVAST Software
Run date: 2011-08-25...

Here is the log of the SystemLook scan:

=========================================================
SystemLook 30.07.11 by jpshortstuff
Log created at 18:20 on 25/08/2011 by David Batista...

Everything went smoothly. Phew!

Here's the log of the results:


=========================================================
ComboFix 11-08-23.06 - David Batista 08/23/2011 22:20:00.6.1 - x86...

Whoa! Seems we hit the jackpot! Quite a few suspicious looking items on this one. Here's the results:


=========================================================
File name: serial.sys
Submission...

It *seems* normal now. I'm still getting the prompt in my sys tray to download the latest Windows automatic update from MS. If you recall, I had mentioned that one of the problems I was having was...

And here is the second file analyzed:


========================================================
File name: 2530145FDC.sys
Submission date: 2011-08-23 17:21:05 (UTC)
Current status: queued...

Bill,

Okay, I analyzed the first file and here are the results below. I'll analyze the second file in a follow-up post.


=========================================================
Antivirus...

Oh okay, great. :thanks:

Are there any other programs to run or steps to take? I get the feeling I'm not done yet, correct?

And I still cannot delete the corrupted .exe files from off my desktop.

--Ryodin

Well, looks like I have to learn a little patience. :D:

It took 5 hours, but it seems I've got my ComboFix log for you after all! I'm pasting it below. For now I'm keeping my PC in Safe Mode. Let...

Quick update.

It's been over 2 hours now and still no change. The c:\Autoscan window is still open, and the command prompt is still blinking, but nothing has finalized.

Since I have no other...

I booted up in Safe Mode and am running ComboFix now.

The scan started at 4:20. It made it to Stage 50 complete at 4:35. It's 4:50 now and it has not gone beyond this point. Just as before, I'm...

Okay, I'll leave it. And I don't want to mess around with the system restore points until we're completely done.

Thanks, Bill!

--Ryodin

Bill,

I just received a warning from my McAfee Security Center informing me that it is blocking a potentially unwanted program from running on my PC.

Here's the message:

"About This...

Oh, I know. I looked for it, but it's not there. There's a folder called "ComboFix" on my C: drive, but when I double click on it, it shows me an identical map of my "My Computer" folder. Meaning, I...

Here is the Extras log:


=========================================================
OTL Extras logfile created on: 8/21/2011 5:27:38 AM - Run 1
OTL by OldTimer - Version 3.2.26.5 Folder =...

Phew! For a second there it seemed like OTL stalled halfway through as well. But then I walked away and came back in an hour and found the two log files waiting for me! :)

So, first I'm going to...

Okay, I let it run for 4 hours more and still nothing changed. So finally I had to quit ComboFix and do a hard reboot. After starting my PC again, I ran ComobFix one more time.

This time it...