Re: *** URGENT *** Vile viruses that are proving difficult to resolve.

Viruses and worms
21

Hi

I ran the fix in safe mode as suggested and the log from it is attached. However now I can’t get FireFox to start up. It tries to start but then nothing happens. However when I then try to shut the system down it says attempting to shutdown FF or words to that effect.

Please help as getting FF back is fairly crucial to my work.

Thanks

Nexar

22

Essexboy will continue when he arrive here later…usually after work hours UK time…

23

Ouch but OK. By the way IE also doesn’t start on the m/c.

Will wait to hear from Essexboy.

Nexar

24

I can see no reason in that log why FF nor IE are functioning

Lets check the services out

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

  • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
  3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

25

Hi

Ran Combofix.exe as required. it started running and I left it. When I came back the window was no longer there. Does it close itself? However no c:\combofix.txt file either. Should I re-boot before it will appear?

Too scared to anything at the moment.

26

Yes reboot please

27

Ok rebooted. Still no comfix.txt file. Then I tried to run FF and that didn’t come up although it’s showing in the Task manager. Wanted to check something else on the drive and explorer (not IE) has stopped working now.

Getting very worried about this. Please help.

Nexar

28

Could you reboot to safe mode and run combofix from there please, this is something new as all I removed was a proxy setting

29

Sure I will but I did reboot whilst waiting for your reply and one of the things I found was a number of my services missing. I’m hoping that is temporary.

Any way wait till I have rebooted in safe mode and run comfix. Will let you know soon.

Thanks for all your help. Hopefully we change directions and move towards the positive soon.

Nexar

30

I started in safe mode and ran combofix which did run but then it told me that avast was still running and that combofix would continue to run but at my risk. However I did not get an option to terminate or anything.

It is currently running in safe mode in what appears to be a dos like window. It is Attempting to create a new System Restore point.

It is has now connected to download.microsoft.com and is downloading some restore software.

What EXACTLY is happening?!! This is getting worse rather than better.

VERY WORRIED NOW

Nexar

31

It is installing the recovery console which in my opinion all XP systems should have. This will allow combofix to work outside of windows

32

OK it finished installing the Recovery Console and then ran through. I’ve re-booted but still no ComboFix.txt at C:. Also FF and IE still don’t open. I can see FireFox.exe in the Task Manager but am not sure what to look for for IE. There is an explorer.exe in the Task Marager but I thought that was just the File Explorer.

What next?

Nexar

33

Up until I had tried to start IE I could open the File Explorer and move around the drives and directories. However after I had tried to start IE if I try and open file explorer then all I get is the Internet Properties window. Doesn’t matter whether its My Computer or a folder or even Network Places I’m trying to open.

Weird uh?

Nexar

34

OK run a system restore using the one prior to the OTL one and we will start again

35

Sorry System Restore won’t start.

Nexar

36

I can start it in Safe Mode. Should I run it from there?

Nexar

37

Yes please, what error do you get ?

38

No error, it just doesn’t start when the system is normally booted. I’m just starting it now in Safe Mode.

Nexar

39

Once it’s Restored, what would you like me to do?

Nexar

40

Run a fresh OTL please and let me know if the browsers are working