Malware removal - can't perform any suggested steps with .exe file

[lcarco]

Hi, I've been trying to complete the steps for malware removal.   I cannot do a THING with my laptop, can't connect to the internet or run any programs (I was trying to do the steps listed on the HOPE forum and was only able to get through the first few steps (rrkill and Super Antispyware) AND run the scan. but from there I've been unable to do anything further. What do I do now???

Thanks!
Lisa

[lcarco]

Oh, I'm running Vista 64 bit.

[harry 48]

if you can download hjt rename it to snipper.exe run it and post the log

[Carlos Medrano]

Wait for a specialist to answer your thread.

[lcarco]

I have been unable to run ANY .exe file, even after renaming it.  I don't want to try anything more without the assistance of a specialist.   

Thanks though!

[harry 48]

Wait for a specialist to answer your thread.

these downloads and logs have to be provided for the malware expert to read it saves them time in telling the OP to do them

but thank you for your comment 

@lcarco ; ok , a malware expert will be along to help you , the weekend is a bad time

[SuperDave]

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

Let me get this straight. You can boot your computer in Normal Mode but you can't connect to the internet? When you try to run any program you get an error message?

[lcarco]

I did the RKILL

Here is the log

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Ran as Lisa on 08/15/2010 at 15:24:57.


Processes terminated by Rkill or while it was running:


C:\Users\Lisa\AppData\Local\tconxtygj\yqidoqdshdw.exe


Rkill completed on 08/15/2010  at 15:25:03.

[SuperDave]

You didn't answer my question.

Let me get this straight. You can boot your computer in Normal Mode but you can't connect to the internet? When you try to run any program you get an error message?

[lcarco]

Yes, I can boot in normal mode, but I can't connect to the internet and I get the error message when trying to run any .exe file.  But for example, I can open outlook and look at my calendar and old mail, I can open Word, but when I try to run any .exe file, it goes immediately to the dang error message.  I cannot connect to the internet because I have a wireless connection with this laptop.

[lcarco]

OK, this is so weird, I CAN connect to the internet now since running that RKILL.  I did not restart or shut down though, I'm sure the problem is still there.  How do I test it?

[lcarco]

Firefox works, but not i.e. 7.

[lcarco]

I ran mbam.exe this morning, here is the log, which confuses me, it almost appears as if I don't have a problem, but i know if I reboot, it's sure to be back.  Now I am at a total loss and await your guidance....

Thanks!


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4052

Windows 6.0.6001 Service Pack 1
Internet Explorer 8.0.6001.18943

8/16/2010 11:12:07 AM
mbam-log-2010-08-16 (11-12-07).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 378551
Time elapsed: 1 hour(s), 50 minute(s), 21 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[SuperDave]

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

*************************************************
Ok. We need to clear your DNS cache.

Please navigate to Start>Run and type cmd

in the window that pops up type ipconfig /flushdns

********************************************8
Download the Fix IE Utility to your desktop.

Before running the utility, make sure that all your Internet Explorer windows are closed!

* Extract the contents of the .zip file to your desktop.
* Double click the Fix IE Utility button to run the tool.
* Click Run Utility
* Click OK when you see 'Re-registered all files'
* Open Internet Explorer and see how it works.
**********************************************
SUPERAntiSpyware

If you already have SUPERAntiSpyware be sure to check for updates before scanning!

Download SuperAntispyware Free Edition (SAS)
* Double-click the icon on your desktop to run the installer.
* When asked to Update the program definitions, click Yes
* If you encounter any problems while downloading the updates, manually download and unzip them from here
* Next click the Preferences button.

•Under Start-Up Options uncheck Start SUPERAntiSpyware when Windows starts
* Click the Scanning Control tab.
* Under Scanner Options make sure only the following are checked:

•Close browsers before scanning
•Scan for tracking cookies
•Terminate memory threats before quarantining
•Please leave the others unchecked

•Click the Close button to leave the control center screen.

* On the main screen click Scan your computer
* On the left check the box for the drive you are scanning.
* On the right choose Perform Complete Scan
* Click Next to start the scan. Please be patient while it scans your computer.
* After the scan is complete a summary box will appear. Click OK
* Make sure everything in the white box has a check next to it, then click Next
* It will quarantine what it found and if it asks if you want to reboot, click Yes

•To retrieve the removal information please do the following:
•After reboot, double-click the SUPERAntiSpyware icon on your desktop.
•Click Preferences. Click the Statistics/Logs tab.

•Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.

•It will open in your default text editor (preferably Notepad).
•Save the notepad file to your desktop by clicking (in notepad) File > Save As...

* Save the log somewhere you can easily find it. (normally the desktop)
* Click close and close again to exit the program.
*Copy and Paste the log in your post.
*************************************************

Download Security Check by screen317 from one of the following links and save it to your desktop.

Link 1
Link 2

* Unzip SecurityCheck.zip and a folder named Security Check should appear.
* Open the Security Check folder and double-click Security Check.bat
* Follow the on-screen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Post the contents of that document in your next reply.

Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.

**************************************************
Please download: HiJackThis to your Desktop.

• Double Click the HijackThis icon, located on your Desktop.
  
• By Default, it will install to: C:\Program Files\Trend Micro\HijackThis
• Accept the license agreement.
• Click the Open the Misc Tools section button.
  
• Place a checkmark beside Calculate MD5 of files if possible. Then, click Back.
  
• Click Do a System Scan and Save a Logfile. Or, if you see a white screen, click Scan.
  
• Please post the log in your next reply.
  

**************************************************

[lcarco]

OK I cleared the DNS cache and ran the Fix IE Utility.  I am connected to the internet (wireless connection) but IE still does not work and now neither does Firefox.  I can send and receive email though via Outlook.  I won't do anything else until I hear back from you. 

Thanks for your help....