Followed Guidelines, still infected :(

I'm not seeing any malware in your logs. Try the below.



Please also download MBRCheck to your desktop

• Double click MBRCheck.exe to run (vista and Win 7 right click and select Run as Administrator)
• It will show a Black screen with some information that will contain either the below line if no problem is found:
  • Done! Press ENTER to exit...
• Or you will see more information like below if a problem is found:
  • Found non-standard or infected MBR.
  • Enter 'Y' and hit ENTER for more options, or 'N' to exit:
• Either way, just choose to exit the program at this point since we want to see only the scan results to begin with.
• MBRCheck will create a log named similar to MBRCheck_07.16.10_00.32.33.txt which is random based on date and time.
• Attach this log to your next message. (See: HOW TO: Attach Items To Your Post )

Now please save Win32kDiag file to your desktop.

• Click on Start->Run, and copy-paste the following command (the bolded text) into the "Open" box, and click OK. When it's finished, there will be a log called Win32kDiag.txt on your desktop. Please attach this log

"%userprofile%\desktop\win32kdiag.exe" -f -r

 

I'm still not seeing any malware in your logs. Let's try a few other tools especially since you could not run ComboFix and RootRepeal, but there may not be any malware at play here. Powering down your PC may have caused some corruption to the registry or some programs. A System Restore may possibly help if we do not find any problems within the below scans.


Please try running GMER per the below and attach the log:

Example using GMER to fix things - Informational Only


Download OTL ny OldTimer from one of the below links and save it to your Desktop.

• OTL_Link1
• OTL-Link2
• OTL-Link3

Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.

• Under the Custom Scan box paste this in the below
  
  netsvcs
  drivers32
  %SYSTEMDRIVE%\*.*
  %systemroot%\*. /mp /s
  CREATERESTOREPOINT
  %systemroot%\System32\config\*.sav
  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Please attach both of these logs to your next message.

 

Still not looking like malware, but let's take a couple more steps.

Click Start, Run, and enter sfc /scannow and click OK. There is a space after the sfc. This runs System File Checker which looks for missing or corrupted system files and attempts to replace/repair them from files on your hard disk or from the CD if necessary. So it will ask for the Windows CD if it needs it.



Now run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following

Code:

:OTL
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:364682BC
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:4D066AD2
@Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:ADF211B1
:Commands
[emptytemp]

[Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Attach the new log it produces in your next reply.

Any improvement? If not, it is time for you to post in the Software Forum.

 

You're welcome

Could be a good idea. I quick test for ideas in the Software Forum wouldn't hurt though. Performing a System Restore or possibly a repair may or may not help but could be tried before opting for a reinstall. You should however get all things you need backed up either way before continuing.

 

You're welcome. Be sure to work thru the below now:

How to Protect yourself from malware!