Help to Fix Virus: "Please wait while the connection is being establised" Please!!!!

[Donnau26]

Hi

I switched my laptop on as normal a couple of days ago to find a screen asking fro my bank details, which after reading previous threads, seems to be the metropolitan police malware screen, so after rebooting I now have a white screen with the message "Please wait while the connection is being established" My laptop is completely frozen and I can not access anything, and even in safe mode I still get the same screen.

I'm not super clued up on removing malware/virus' etc so after reading other threads on this I was a little nervous as to follow what had been suggested on them, especially as there are warnings saying they are specific to that particular users system.

I have a Toshiba Satellite L350-203 that is runing Vista Home Premium 32Bit.

If given specific instructions, by you guys in the know, on how to remove the malware/virus I'm hoping I can reslove this.

A friend has suggested reinstalling a new operating system, windows 7, as they say the malware could be imbeded to deep to remove completely, however I do not want to lose what files I have on my hardrive, photos/videos etc..

Is there anyway you could help???

Many Thanks in advance!!

Donna.

[thisisu]

Welcome to Major Geeks, Donna

There is no need to reinstall the operating system. Follow these instructions:

For 32-bit (x86) systems download Farbar Recovery Scan Tool and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
• Use the arrow keys to select the Repair your computer menu item.
• Choose your language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account and click Next.

To enter System Recovery Options by using Windows installation disc:

• Insert the installation disc.
• Restart your computer.
• If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
• Click Repair your computer.
• Choose your language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account an click Next.

On the System Recovery Options menu you will get the following options:

• Startup Repair
• System Restore
• Windows Complete PC Restore
• Windows Memory Diagnostic Tool
• Command Prompt

• Select Command Prompt
• In the command window type in notepad and press Enter.
• The notepad opens. Under File menu select Open.
• Select "Computer" and find your flash drive letter and close the notepad.
• In the command window type e:\frst.exe and press Enter
• Note: Replace letter e with the drive letter of your flash drive.
• The tool will start to run.
• When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) on the flash drive. Please attach this log to your next reply. (How to attach)

[Donnau26]

Hi thisisu, thanks for your response and help

Attached is the FRST.txt file....

Thanks again!

[thisisu]

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Attached is fixlist.txt

• Save fixlist.txt to your flash drive.
• You should now have both fixlist.txt and FRST.exe on your flash drive.

Now re-enter System Recovery Options.
Run FRST and press the Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt).
Please attach this to your next message. (How to attach)

Now attempt to boot normally.

If you were able to boot, it is highly recommend that you go through this procedure as you have multiple infections: How to Remove Trojan:DOS/Alureon.A

If you weren't able to boot, please attach both the fixlog.txt as well as a new FRST.txt scan.

[Donnau26]

Hi thisisu

I have managed to reboot successfully, so will follow the instructions as you have recommended.

I can't thank you enough for all your help.

The Fixlog.txt file is attached.

Thanks again!
Donna

[Donnau26]

Hi Thisisu

I performed the TDSSKiller scan and one malicious item was found, and I could not set the step to cure, so I set it to skip as instructed and so nothing was done to remove it.

I then performed the MRBCheck and this found no problem.

My TDSSKiller log is attached, can you help with instruction on what to do next?

Thanks
Donna

[thisisu]

Originally Posted by Donnau26

My TDSSKiller log is attached, can you help with instruction on what to do next?

Now try to complete as much as possible in this thread: READ & RUN ME FIRST Malware Removal Guide