|
Answer» Hey folks,
My boy opened his computer and saw the alert that "Windows security alert. Windows reports that computer is infected, and TRIES to steer you to update to some fix. 1)I have Bitdefender and it is up to DATE. 2)Firewall is enabled through Bitdefender 3)Had to GO to Safe Mode to populate Add-Remove programs removed LoudMo Contexual Adware(saw nothing else) 4)Ran CCleaner Slim in SafeMode and deleted all cookies 5)SuperAntispyware would not load in Safe or regular mode (message SAID 'system admin has set policies to prevent this installation'6)Loaded MBAM in safemode (could not get to net to update in either mode)attached a quick scan and full scan log. 7)Will not let me get to the net to update java Could not load HijackThis in regular mode, but did in SafeMode. Cant get to net, open programs in desktop. Please help when you get time and thanks for the help
[Saving space, attachment deleted by admin]Hi
It is probably a rogue.
Download OTL to your Desktop
- Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
- Under the Custom Scan box paste this in
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\*.exe /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%SYSTEMDRIVE%\*.*
%PROGRAMFILES%\*.
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
/md5stop
CREATERESTOREPOINT
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
- Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
- When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
- Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time
|
