Solved Windows Vista infected with US DOJ virus

[CAM29]

Yes. Changed directory to C:\Windows\System32 and ran it from there.

 

[CAM29]

After I click OK on the pop up message, in the command prompt window below the command (sfc /verifyonly) I just ran, it states Access Denied.

 

[TwinHeadedEagle]

Okay. Run FRST and post fresh Scan report.

 

[CAM29]

I will get it to you on Monday if that is ok.

 

[TwinHeadedEagle]

Of course it is.

 

[CAM29]

Here you go.

 

[TwinHeadedEagle]

Download attached fixlist.txt and save it to your USB flashdrive as fixlist.txt

>> Boot into Recovery Environment


Start FRST in a similar manner to when you ran a scan earlier, but this time when it opens ....

• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your USB flashdrive.

>> Exit out of Recovery Environment and post me the log please.



Try to boot Windows normally...

 

[CAM29]

Same message. I did get the original install disks from my co-worker. Would you like for me to try and do the repair with the disks? Here is the log file. Thanks.

 

[TwinHeadedEagle]

I really don't know where is this virus hiding, I checked everything and can't find the source. Please attach fresh FRST scan report for my last check.

 

[CAM29]

Here you go.

 

[TwinHeadedEagle]

You have a lot of system restore points. Can you try to use one of them to restore your system to the time before infection.

 

[CAM29]

Will not let me start the restore process.

 

[TwinHeadedEagle]

What happens?

 

[CAM29]

Would you recommend trying the repair with the install disk or just format and start over? Just want to be sure if the repair works and I boot up normally that the virus will not surface again.

 

[TwinHeadedEagle]

You can try repair option first. If it fails format won't go away

 

[CAM29]

As for the restore. I do not have that option when pressing F8. I am not able to start in safe mode at all so, not able to launch restore manually.

 

[TwinHeadedEagle]

You can use System Restore in recovery.

 

[CAM29]

I ran the repair off of the install disk and am now able to boot in to Windows. Here is another log I ran while in Windows.

 

[TwinHeadedEagle]

Good. PC seems clean now, is everything fine?

 

[CAM29]

I have given the PC back to my co-worker and she claims it has been running fine. We thank you for all your help.