My computer to be unusable! by Malware

Welcome to Major Geeks!

Did you try after running the cleaning procedure?

Not true. ComboFix works fine with your OS. Try it again in safe boot mode.

Are you filtering anything from being displayed with HijackThis? Your log looks way too small which would indicate you are filtering information which you must not do or we will not be able to fix your problems.

First please run this Resetting Registry and File Permissions Make sure you reboot as requested.

Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
O4 - HKLM\..\Run: [RRT-Auto] C:\Documents and Settings\Administrator\Desktop\RRT\RRT.exe auto
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1continue.

After clicking Fix, exit HJT.

Copy the bold text below to notepad. Save it as C:\fixme.reg That is save it to the root folder of your C drive. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

Make sure that you tell me if you receive a success message about adding the above
to the registry. If you do not get a success message, it definitely did not work.


Now download The Avenger by Swandog46, and save it to your Desktop.

• Extract avenger.exe from the Zip file and save it to your desktop
• Run avenger.exe by double-clicking on it.
• Do not change any check box options!!
• Copy everything in the Quote box below, and paste it into the Input script here: part of the window:

• Now click the Execute button.
• Click Yes to the prompt to confirm you want to execute.
• Click Yes to the Reboot now? question that will appear when Avenger finishes running.
• Your PC should reboot, if not, reboot it yourself.
• A log file from Avenger will be produced at C:\avenger.txt and it will popup for you to view when you login after reboot.

Also delete all files in the below folders except ones from the current date (Windows will not let you delete the files from the current day).
C:\WINDOWS\TEMP
C:\Documents and Settings\Administrator\Local Settings\Temp
Now run Ccleaner to clean out only temp files and nothing else!

Now download the current version of MGtools[/URL] and save it to your root folder. Overwrite your previous MGtools.exe file with this one.

Run MGtools.exe ( Note: If using Vista make sure UAC is still disabled. Also don't double click on it, use right click and select Run As Administrator )

Then attach the below logs:

• C:\avenger.txt
• C:\MGlogs.zip

Make sure you tell me how things are working now!

 

You don't know why what?

Did you run this Resetting Registry and File Permissions as requested and reboot? What happened while you were running this?

• Are you able to run and update Malwarebytes? If so, update and run a new scan. Attach the new log.
• Are you able to run and update SUPERAntiSpyware? If so, update and run a new scan. Attach the new log.
• Do you see this folder? C:\WINDOWS\Web\TSWeb96 If yes, can you delete the TSWeb96 folder?
• Are you able to boot in Safe Mode with Command Prompt?

 

Since you do not seem to be able to run anything, it may become necessary for you to reinstall since we may not be able to remove your malware. There are too many Windows issues getting in our way. However let's try one more fix.

• Run avenger.exe by double-clicking on it.
• Do not change any check box options!!
• Copy everything in the Quote box below, and paste it into the Input script here: part of the window:

• Now click the Execute button.
• Click Yes to the prompt to confirm you want to execute.
• Click Yes to the Reboot now? question that will appear when Avenger finishes running.
• Your PC should reboot, if not, reboot it yourself.
• A log file from Avenger will be produced at C:\avenger.txt and it will popup for you to view when you login after reboot.

Now run Ccleaner to clean out only temp files and nothing else!

Now download the current version of MGtools and save it to your root folder. Overwrite your previous MGtools.exe file with this one.

Run MGtools.exe ( Note: If using Vista make sure UAC is still disabled. Also don't double click on it, use right click and select Run As Administrator )



Then attach the below logs:

• C:\avenger.txt
• C:\MGlogs.zip

Make sure you tell me how things are working now!

 

You're welcome.

Complete all of the instructions in the below and follow all of the tips

How to Protect yourself from malware!