Combofix and MGtools will not run

yanos · Oct 24, 2009

It started with a download from a site for a piece of sheet music, should have known better. I have dealt with some minor problems in the past, but this one has got me cornered. It lead to not being able to boot. I have moved past that after running one of the recommended bootable anti-virus scans (antivir I believe) and then using the XP disc to repair. The bootable anti-virus renamed quite a few executables with a .XXX suffix and a few of these were pertinant windows files, which I would guess is causing me a few issues now.

Have walked through the steps and combofix will not proceed from start up screen and MGtools will not start. Now that I have tried combofix again, it states that it has been comprimised and that I should download a new copy. But neither internet application is working now. and I can not shut down without a "Hard reset."

Attached are the logs from SAS, MAM and RR

As you can see I haven't posted before, but I have learned much from your site. Through your basic steps I have helped quite a few family and friends with issues, but now I've got myself in a pickle. I'd appreciate any help that you may be able to provide.

Thanks!

chaslang · Oct 25, 2009

Welcome to Major Geeks!

yanos said: ↑

Now that I have tried combofix again, it states that it has been comprimised and that I should download a new copy.
Click to expand...

If ComboFix is telling you anything about a Virut infection then you will be reinstalling since that is the only reliable cure for Virut.

We cannot say for sure whether you have Virut without seeing the log from MGtools. You should try running MGtools in safe boot mode to see what happens. Attach the MGlogs.zip file if it runs.

yanos · Oct 26, 2009

Unfortunately I tried running MGtools via safe boot mode. No dice. I took a chance and installed one of my hard drives in an external case. Ran a scan and detected lots of traces of virut. I guess I am stuck reformatting and starting over. Bad day. Thanks for your help.

chaslang · Oct 26, 2009

You're welcome.

yanos said: ↑

. Ran a scan and detected lots of traces of virut. I guess I am stuck reformatting and starting over.
Click to expand...

Yes below is a typical message given to people when we see Virut on their system. As you can see, it is bad news.

Sorry to give you the bad news but you will have to do a total clean reinstall.
I can see the reason for your problems. Your logs show that your Windows Operating system files have become infected by a Virut infection and there is no known reliable fix for this. In addition there are many many other infected files. We could spend a lot of time trying to remove this infection, but odds are that it will not work because the nature of the infection has so many executable system files infected that as soon as we fix one file, other files that are infected will almost immediately or upon the next reboot, just reinfect the files. In addition, your PC would still basically be unreliable/untrustworthy even if we manage to fix the infected files that we can see since there could be many more that we are not seeing.

The safest thing for you to do is backup your personal data immediately since your PC could possibly become unbootable at any point in time. Do not back up any executable files. This includes programs that you have downloaded since any of them could be infected. Anything you may have already backed up that is an executable type file (things you downloaded to install programs....etc) are most likely infected and will cause you to be reinfected if you reuse these files.

Once you backup, you need to format partitions and reinstall Windows and all other software especially your protection software. Then install all updates for all software. DO NOT reinstall from any executable file backups you made while this PC was infected or you will just be reinstalling the infection.
Click to expand...

Log in or Sign up

Combofix and MGtools will not run

yanos Private E-2

Attached Files:

SUPERAntiSpyware Scan Log - 10-23-2009 - 21-36-41.log

mbam-log-2009-10-23 (21-46-27).txt

Rootrepeal - 102309 2302.zip

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

yanos Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member