frst.txt included - 'please wait while the connection is being established'

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by headaches, May 16, 2012.

  1. headaches

    headaches Private E-2

    Hello Generous People who Volunteer Here,

    I am the family computer administrator by default, and find myself out of my depth with this conundrum. The computer is an HP Pavilion s5000 series running Windows 7 Home 64bit. The dreaded 'please wait while the connection is being established' with German text below has replaced the desktop and the task manager is disabled. I ran the FRST tool but unfortunately can't figure out how to write a fix to feed to it. I really appreciate your time and kindness.
     

    Attached Files:

  2. thisisu

    thisisu Malware Consultant

    Welcome to Major Geeks, headaches

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    Attached is fixlist.txt
    • Save fixlist.txt to your flash drive.
    • You should now have both fixlist.txt and FRST64.exe on your flash drive.

    Now re-enter System Recovery Options.
    Run FRST64 and press the Fix button just once and wait.
    The tool will make a log on the flashdrive (Fixlog.txt).
    Please attach this to your next message. (How to attach)

    Now attempt to boot normally.
     

    Attached Files:

  3. headaches

    headaches Private E-2

    Dear thisisu,

    Mere words like 'thank you' cannot adequately express how grateful I am for your speedy and effective response. I greatly appreciate you sharing your time and knowledge so selflessly.
     

    Attached Files:

  4. thisisu

    thisisu Malware Consultant

    My pleasure :)

    Any other problems or is the system OK now?
     
  5. headaches

    headaches Private E-2

    Dear thisisu,
    I restored the desktop icons according to your advice in another thread. Worked a treat :) Then I ran Malwarebytes and it picked up and destroyed 1 more file. I ran Malwarebytes again, and it detected 1 file and ditto the Avast boot time scan:

    File C:\FRST\Quarantine\BSI.bund.exe is infected by win32:Rootkit-gen [Rtk]

    I am guessing i should use FRST to destroy this file, not Avast or Malwarebytes.
    Do I use the FRST file search feature to do this? Sorry if this is an obvious question :-o
    Thanks for continuing to share your wisdom.
     
  6. thisisu

    thisisu Malware Consultant

    Delete this entire folder using Windows explorer: C:\FRST

    That's it ;)
     
  7. headaches

    headaches Private E-2

    It's done :celebrate

    Dear thisisu,

    In your own way you make a difference in peoples lives. I admire that.

    Thank you.
     
  8. thisisu

    thisisu Malware Consultant

    You're very welcome and thank you for the compliment :)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds