Fiery
Level 1
- Jan 11, 2011
- 2,007
Good, that is the entire log 
Please download ERUNT from here to your USB and transfer it to your infected PC.
Next, please follow the instructions below VERY carefully and make sure you highlight everything in the Quote box (Don't hightlight the word Quote: though)
<hr>
Open up Notepad and copy & paste the following:
* Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
* At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
* You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
* Now use your mouse to drag CFscript.txt on top of ComboFix.exe
* Follow the prompts.
* When it finishes, a log will be produced named c:\combofix.txt
* I will ask for this log below
<hr>
Next, download TDSSkiller from here to your USB and transfer it to your infected PC.
Post the log after (usually C:\ folder in the form of TDSSKiller.[Version]_[Date]_[Time]_log.txt
<hr>
Please download Malwarebytes' Anti-Malware to your desktop.
<hr>
Let me know how your system is running after performing all these scans.
Please download ERUNT from here to your USB and transfer it to your infected PC.
- Install ERUNT by following the prompts
(use the default install settings but say no to the part that asks you to add ERUNT to the start-up folder. - Start ERUNT by double clicking on the desktop icon or choosing to
- Choose a location for the backup
(The default location is C:\WINDOWS\ERDNT) - Make sure that boxes beside System Registry and Current User Registry are checked
- Press OK
- Press YES to create the folder.
Next, please follow the instructions below VERY carefully and make sure you highlight everything in the Quote box (Don't hightlight the word Quote: though)
<hr>
Open up Notepad and copy & paste the following:
* Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
* At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
* You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
* Now use your mouse to drag CFscript.txt on top of ComboFix.exe
* Follow the prompts.
* When it finishes, a log will be produced named c:\combofix.txt
* I will ask for this log below
<hr>
Next, download TDSSkiller from here to your USB and transfer it to your infected PC.
- Double-Click on TDSSKiller.exe to run the application
- When TDSSkiller opens, click change parameters , check the box next to Loaded modules . A reboot will be required.
- After reboot, TDSSKiller will run again. Click Change parameters again and make sure everything is checked.
- click Start scan .
- If a suspicious object is detected, the default action will be Skip, click on Continue. (If it saids TDL4/TDSS file system, select delete)
- If malicious objects are found, ensure Cure (default) is selected, then click Continue and Reboot now to finish the cleaning process.
Post the log after (usually C:\ folder in the form of TDSSKiller.[Version]_[Date]_[Time]_log.txt
<hr>
Please download Malwarebytes' Anti-Malware to your desktop.
- Double-click mbam-setup.exe and follow the prompts to install the program.
- At the end, be sure a checkmark is placed next to
- Update Malwarebytes' Anti-Malware
- and Launch Malwarebytes' Anti-Malware
- then click Finish.
- If an update is found, it will download and install the latest version.
- When it prompts you to try their 30-day trail, click decline
- Once the program has loaded, select Perform quick scan, then click Scan.
- When the scan is complete, click OK, then Show Results to view the results.
- Be sure that everything is Checked (ticked) except items in the C:\System Volume Information folder and click on Remove Selected.
- When completed, a log will open in Notepad. please copy and paste the log into your next reply
- If you accidently close it, the log file is saved here and will be named like this:
- C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
<hr>
Let me know how your system is running after performing all these scans.
