Problems running programs and internet
Hello again Broni. ========== Processes (SafeList) ========== ========== Modules (SafeList) ========== ========== Win32 Services (SafeList) ========== ========== Driver Services (SafeList) ========== ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== Yahoo! SearchBar Home Page ========== FireFox ========== js ..browser.search.defaultenginename: "Yahoo"js ..browser.search.defaulturl: "http://search.yahoo.com/search?ei=UTF-8&fr=ytff-msgr&p="js ..browser.search.param.yahoo-fr: "chrf-ytbm"js ..browser.search.param.yahoo-fr-cjkt: "chrf-ytbm"js ..browser.search.param.yahoo-type: "${8}"js ..browser.search.selectedEngine: "Yahoo"js ..browser.startup.homepage: "http://www.google.com/"js ..extensions.enabledItems: {9AA46F4F-4DC7-4c06-97AF-5035170633FE}:0.4.5.15js ..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2js ..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8js ..extensions.enabledItems: firedownload@mozilla.org :2.0.1js ..extensions.enabledItems: {1392b8d2-5c05-419f-a8f6-b9f15a596612}:2.7.2.0js ..extensions.enabledItems: jqs@sun.com :1.0js ..extensions.enabledItems: performeroptimum@livejasmin.com :3.1.5.5js ..extensions.enabledItems: {93AC5297-EC57-4B82-9675-E3658FA44711}:1.0js ..extensions.enabledItems: {C8B0FA04-8CC9-406F-A0CF-D2D1AAACDFDB}:1.9.1js ..extensions.enabledItems: {66871bd1-5ba2-4739-b485-2a15f5969bd8}:2.20100123http://download.microsoft.com/downlo...22/wmv9VCM.CAB (Reg Error: Key error.)http://www.fileplanet.com/fpdlmgr/ca..._2.3.6.108.cab (CDownloadCtrl Object)http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_17)http://cdn2.zone.msn.com/binFramewor...o.cab56649.cab (MSN Games - Installer)http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Reg Error: Key error.)http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_17)http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_17)========== Files/Folders - Created Within 90 Days ========== ========== Files - Modified Within 90 Days ========== ========== Files Created - No Company Name ========== ========== LOP Check ========== ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*.* > < %systemroot%\system32\Spool\prtprocs\w32x86\*.dll > < %systemroot%\system32\*.wt > < %systemroot%\system32\*.ruy > < %systemroot%\Fonts\*.com > < %systemroot%\Fonts\*.dll > < %systemroot%\system32\spool\prtprocs\w32x86\*.tmp > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > < %systemroot%\Tasks\*.job /lockedfiles > < %systemroot%\System32\config\*.sav > < %systemroot%\system32\user32.dll /md5 > < %systemroot%\system32\ws2_32.dll /md5 > < %systemroot%\system32\ws2help.dll /md5 > < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs > < > < Read more: http://www.d-a-l.com/help/spyware-ad...#ixzz0yEH2Q4Hp > ========== Alternate Data Streams ========== Always paste all logs into your reply.Malwarebytes
Also, I cleaned your computer back here: http://www.d-a-l.com/help/spyware-ad...han-usual.html and you even didn't care to give me a final word about your computer behavior.
My apologies, Broni. My mother's computer is still running well.
MBRCheck log looks good Here Here **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop** Please, never rename Combofix unless instructed. Close any open browsers. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.Very Important! disable your anti-virus , script blocking and any anti-malware real-time protection before "unpredictable results" .Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask. NOTE. Recovery Console Close any open browsers. WARNING: Combofix will disconnect your machine from the Internet as soon as it startsPlease do not attempt to re-connect your machine back to the Internet until Combofix has completely finished. If there is no internet connection after running Combofix, then restart your computer to restore back your connection. Double click on combofix.exe & follow the prompts. When finished, it will produce a report for you. Please post the "C:\ComboFix.txt" **Note: Do not mouseclick combofix's window while it's running. That may cause it to stall** Make sure, you re-enable your security programs, when you're done with Combofix. DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
Big problem. While ComboFix was doing its thing, the computer rebooted. Now when starting up, it gives me a black screen after verifying the pool data. I tried to go into safe mode, but I'm on a usb keyboard. I can get a normal keyboard tomorrow unless you have another solution.
Btw, I'm posting from my phone.
Regular keyboard would be helpful, so we can see, if we can get to safe mode, last known good configuration, or use recovery console.
Ok.Got a ps2 keyboard.
Let's see, if we can look at your computer booting from an external source.OTLPE When downloaded double click on OTLPENet.exe and make sure there is a blank CD in your CD drive. This will automatically create a bootable CD. Reboot your system using the boot CD you just created.Note here Your system should now display a REATOGO-X-PE desktop. Depending on your type of internet connection, you should be able to get online as well so you can access this topic more easily. Double-click on the OTLPE icon. When asked Do you wish to load the remote registry , select Yes When asked Do you wish to load remote user profile(s) for scanning , select Yes Ensure the box Automatically Load All Remaining Users " is checked and press OK OTL should now start. Press Run Scan to start the scan. When finished, the file will be saved in drive C:\OTL.txt Copy this file to your USB drive if you do not have internet connection on this system Please post the contents of the OTL.txt file in your reply.
Full Member
Problems running programs and internet 26 | 005,883,936 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\xing shared
