Hi,
Usually I can get rid of this by doing the reboot in safe mode,however this time when I go to safe mode the Pc keeps rebooting into normal windows mode.
There is malwarebytes(freeware)installed on this PC but it doesnt seem to have stopped it this time.
Is there any method of using a usb stick with a program on or a disk where i can reboot the pc and these will take this awful pest off.
Help appreciated as always.
Originally posted by neilcolt: Hi,
Usually I can get rid of this by doing the reboot in safe mode,however this time when I go to safe mode the Pc keeps rebooting into normal windows mode.
There is malwarebytes(freeware)installed on this PC but it doesnt seem to have stopped it this time.
Is there any method of using a usb stick with a program on or a disk where i can reboot the pc and these will take this awful pest off.
Help appreciated as always.
What is it you are trying to rid by booting in safe mode?
There are several things that can keep you from booting in safe mode like the Trojan Sirefe.
Have you tried anything except MBAM?
Maybe Combofix can fix it.
Run Combofix:
You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)
Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<
Combofix may need to reboot your computer more than once to do its job this is normal.
You can download Combofix from one of these links. I want you to save it to the desktop and run it from there.
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.
Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer.
"information and logs"
In your next post I need the following
Log from Combofix
let me know of any problems you may have had
How is the computer doing now?
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves...
Originally posted by neilcolt: THanks for this Ukash now removed.Solved.
That took care of that little problem for the moment. You are still infected and if you don't clean it all out, it will come back to haunt you:(
If you would like, I can help you get it clean......
Run these programs and you will see that you still have some malware that is deep in your machine.
--AdwCleaner--
Please download AdwCleaner by Xplode to your Desktop.
? Close all open programs and internet browsers.
? Double click on AdwCleaner.exe to run the tool.
? Click on Delete tab follow the prompts.
? A log file will automatically open after the scan has finished.
? Please post the content of that log file with your next answer.
? You can find the log file at C:\AdwCleaner[Rn].txt (n is a number).
?Junkware Removal Tool--
Please download Junkware Removal Tool to your Desktop.
? Please close your security software to avoid potential conflicts. ? Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
? The tool will open and start scanning your system.
? Please be patient as this can take a while to complete, depending on your system's specifications.
? On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
? Please post the contents of JRT.txt into your reply.
--RogueKiller--
? Download & SAVE to your Desktop RogueKiller for 32bit or Roguekiller for 64bit ? Quit all programs that you may have started.
? Please disconnect any USB or external drives from the computer before you run this scan!
? For Vista or Windows 7, right-click and select "Run as Administrator to start"
? For Windows XP, double-click to start.
? Wait until pre-scan has finished ...
? Then Click on "Scan" button
? Wait until the Status box shows "Scan Finished"
? click on "delete" ? Wait until the Status box shows "Deleting Finished" ? Click on "Report" and copy/paste the content of the Notepad into your next reply.
? The log should be found in RKreport[1].txt on your Desktop
? Exit/Close RogueKiller+
Please paste the logs in your next reply.
Let me know what problem persists and we can dig the rest of the malware out.
