"internet security" virus

[ken545]

How is everything running now ?

[Galois]

It seems to be running fine now.

[ken545]

Great, thats wonderful


We need to update your Java to keep you more secure

1. Go to your Control Panel and click on the Java Icon ( looks like a little coffee cup ) click on About and you should have Version 7 Update 5, if not proceed with the instructions.
   
2. Then go to the update Tab and update it
   
3. Then go to your Add Remove Programs (WIN XP) or Programs and Features (Vista / Win 7) in the Control Panel and uninstall all previous versions.

You can verify the installation Here

• Click START then RUN
• Now type Combofix /uninstall in the runbox and click OK. Note the space between the X and the /, it needs to be there.
  
  
  

Open OTL and click on Clean Up and it will remove programs we used to clean your system along with there backups, any programs that where not removed you can just drag to the trash.


Malwarebytes is the free version and yours to keep and will not be removed

• How did I get infected in the first place ?
  Read these links and find out how to prevent getting infected again.
• Tutorial for System Restore <-- Do this first to prevent yourself from being reinfected.
• WhattheTech
• Grinler BleepingComputer
• GeeksTo Go
• Dslreports

Safe Surfn
Ken

[Galois]

:( after following the last set of directions, the computer hard freezes a few minutes after startup (alt-ctrl-delete isn't even responsive).

[ken545]

Just press and hold the power button on your computer for 5 seconds or more until it shuts down and then restart it

[Galois]

I've rebooted the system several times, and I occasionally get this message box directly after rebooting

"Unable to create file:
C:\Windows\ERDNT\AutoBackup\8-22-2012\ERDNT.INF

Registry backup will continue, but no restore information for the ERDNT program will be saved. This means that later restoration of the registry can only be done manually, by using another OS to copy back the files."

Then the computer seems to run fine as long as I don't plug in the ethernet cable. But sometimes if I plug in the ethernet cable and open firefox, it hard freezes almost immediately.

[ken545]

C:\Windows\ERDNT <-- This message is caused by ERUNT wanting to make a registry backup but ERUNT may be damaged, open it up and disable any automatic backups, really dont need it now.

As far as FF freezing when you plug in your lan cable, not sure, have you turned the computer off, then plug in your cable and restart yourcomputer and see if that helps.

In your original post you stated that things ran fine in Safemode but a lot of things where unresponsive in normal windows, you may want to think about doing a System Repair and maybe even a format of your hard drive and a fresh clean install of windows, if you want to do this let me know and I can link you to a windows forum that we work closely with that can help you. Do you have your windows CD or the Recovery CD that came with your computer ?