Please wait while your connection is being established

Hi! I have been enjoying trying to educate myself on virus removal. Starting from a pretty low base! On booting up a white screen kicks in "please wait while the connection is being established" with German wording underneath. Am on a Vaio with Windows 7. I scanned and attach the frst.txt
3 hours into this any help would be massively appreciated!:cry

 

Welcome to MajorGeeks, Grimship

The tool was not run properly. Use these instructions below:

http://img827.imageshack.us/img827/1263/frst.gif For 32-bit (x86) systems download Farbar Recovery Scan Tool and save it to a flash drive.
For 64-bit (x64) systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
• Use the arrow keys to select the Repair your computer menu item.
• Choose your language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account and click Next.

To enter System Recovery Options by using Windows installation disc:

• Insert the installation disc.
• Restart your computer.
• If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
• Click Repair your computer.
• Choose your language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account an click Next.

On the System Recovery Options menu you will get the following options:

• Select Command Prompt
• In the command window type in notepad and press Enter.
• The notepad opens. Under File menu select Open.
• Select "Computer" and find your flash drive letter and close the notepad.
• In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
• Note: Replace letter e with the drive letter of your flash drive.
• The tool will start to run.
• When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) on the flash drive. Please attach this log to your next reply. (How to attach)

 

Good morning and thankyou for helping! On following your instructions I am fine but on entering "G:\frst.exe" I get the comment "the subsystem needed to support the image type is not present". I managed to get the file to run previously by shutting down and rebooting into safemode with command prompt - but that gave me the file I sent previously which did not run properly.

 

Good afternoon,

You should have downloaded FRST64.exe as according to your first log, you are running on a 64-bit operating system.

Then you'd enter: E:\frst64.exe
into the Command Prompt to get it to launch.

 

Hi and thanks SO much for helping :-D
That worked! Thought that as my command prompt reads "x:\windows\system32" that meant a 32 bit .......amateurs huh !!
Hopefully this attached is better.

 

Yes this one is correct.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Attached is fixlist.txt

• Save fixlist.txt to your flash drive.
• You should now have both fixlist.txt and FRST64.exe on your flash drive.

Now re-enter System Recovery Options.
Run FRST64 and press the Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt).
Please attach this to your next message. (How to attach)

Now attempt to boot normally.

 

Thankyou, its worked. Made my weekend. You are a star!!! Can't thankyou enough!!

 

You're welcome.

The script reports that it deleted a file I didn't intend for it to delete.

Can you copy/paste this file:

• C:\FRST\Quarantine\rundll32.exe <-- this is the good file

Into this folder:

• C:\WINDOWS\system32

Let me know if you had any trouble with this or if the file was already there (in the system32 folder).

 

Good morning! The file was already there - created 2009. Pasted the new file and kept the old one.

 

Ok

You can delete the C:\FRST folder at this time.
Be safe