HDD SMART and Alureon-K -- all files gone from Windows explorer

Viruses and worms
21

Unfortuantely, cleanspool doesn’t work (see log).

I checked, and C:\Windows\System32\ SPOOLSV.EXE is NOT present, only SPOOLSS.DLL…

22

Here’s the message I get… ???

23

When you try to start the print spooler what error do you get ?

Also could you go to control panel > Administrative tools > Services
Right click Print spooler and select properties
Select the dependancies tab and ensure that the required services are not giving an error

24

Here are the print spooler’s screenshots

25

And here are the one of the dependant process

26

Could you now run OTL as I need to locate all versions of a file

Download OTL to your Desktop

[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
[*]Select All Users
[*]Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%*.exe
/md5start
SPOOLSV.*
/md5stop
CREATERESTOREPOINT
[*]Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Post both logs

27

Here is the resulting EXTRAS-file…

28

…and the resulting OTL-file.

edit: I just realized I omitted the CREATERESTOREPOINT :-[ I hope that’s not too bad for the result, otherwise I’ll run the scan again.

29

No thats good, it has shown that the file is missing and where the replacements are

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

:Commands [CREATERESTOREPOINT]

:Files
C:\WINDOWS\system32\spoolsv.exe|C:\WINDOWS\system32\dllcache\spoolsv.exe /replace


[*]Then click the Run Fix button at the top
[]Let the program run unhindered, reboot the PC when it is done
[]Then try the print spooler again

30

;D

My printers are back and work fine!

Thank you, Thank you, Thank you, once more!

31

Just run OTL and hit the cleanup button. Then relax and enjoy ;D

32

If I should ever meet you in person, I’ll buy you a beer…or two…or three…!

One last question: I still have a folder named RK_Quarantine containing three files on my desktop (1.29 MB). I can just delete it, correct?

33

Aye just remove they ones ;D