new computer; various problems!!!

[hotbot3808]

ok did the steps got to the combofix window, followed prompts,  yes to disclaimer  window says scanning for infected files some blue screen appeared  then shut down.did't get to create log. same one on desktop also I  did this twice something changed the toolbar where i type mywww's .com has disappeared after i did the steps .can't get it back.

[evilfantasy]

Go to C:\combofix.txt and see if the log is there.

Combofix sets a new restore point before doing it fix so if needed do a system restore to get everything back to normal.

[hotbot3808]

OK REMEMBER NOT COMPUTER LITERATE. SYSTEM RESTORE? GONNA LOOK IT UP IN YOUR DATABASE TRY IT AND POST BACK.LOOKING FOR COMBO FIX .
PLEASE PLEASE BE PATIENT.TRYING TO GET COMPREHEND ALL THIS STUFF. I'M PROBABLY THE MOST ILLITERATE COMPUTER OWNER YOU DELT WITH SO PLEASE DON'T ABANDON ME. THANX EVILFANTASY.

[evilfantasy]

Use System Restore to Undo Changes if Problems Occur

http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/systemrestore.mspx

[hotbot3808]

OK I FEEL HELPLESS. COMBOBATCH AND COMBO-fIX.SYS IS THERE. NOTHN ABOUT LOGS. SHOULD i TRY THE STEPS OVER.  SO LOST. I KNOW YOU NEED THIS STUFF TO HELP.

[evilfantasy]

From the desktop open My Computer, then open Drive C and look for C:\combofix.txt. Open it and copy/paste the entire log into the next reply (if the log is there)

[hotbot3808]

WELL HERE'S WHAT I FOUND WHEN I DID WHAT YOUN SAID
THE FOLLOWING  SAID TEXT DOCUMENTS. I HOPE THIS IS IT.

THERE WERE OTHER COMBO FIX STUFF BUT THESE ARE THE ONLY ONES THAT SAID TEXT AND HAD WHAT LOOKS LIKE A LOG ICON NEXT TO THEM.

[recovering space - attachment deleted by admin]

[evilfantasy]

Good job, thats what we needed.

Delete these files/folders, as follows:

1. Go to Start > Run > type Notepad.exe and click OK to open Notepad.
It must be Notepad, not Wordpad.

• Click Start , then Run
  
• Type notepad.exe in the Run Box.
  

2. Copy the text in the below code box by highlighting all the text and pressing Ctrl+C

Code: [Select]

KillAll::

Folder::
C:\Users\All Users\xkhgzgvk
C:\Users\All Users\guqwlhse
C:\ProgramData\xkhgzgvk
C:\ProgramData\guqwlhse

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uvxttdix"=-
3. Go to the Notepad window and click Edit > Paste
4. Then click File > Save
5. Name the file CFScript.txt - Save the file to your Desktop
6. Then drag the CFScript (hold the left mouse button while dragging the file) and drop it (release the left mouse button) into ComboFix.exe as you see in the screenshot below. Important: Perform this instruction carefully!



ComboFix will begin to execute, just follow the prompts.
After reboot (in case it asks to reboot), it will produce a log for you.
Post that log (Combofix.txt) in your next reply.

Note: Do not mouseclick combofix's window while it is running. That may cause your system to freeze

Next post
Combofix log

Also let me know how things are now.

[hotbot3808]

OMG SORRY I FORGOT TO POST THE RESULTS OF YOUR PATIENT, CAREFUL, CONSIDERATE AND MOST APPRECIATED WORK

WELL IN MY FIRST POST I RAN DOWN ALL MY PROBLEMS AND SO FAR HERE'S THE END RESULT

1-5-GREAT
6 -HAVE NOT SEEN THIS ICON ANYMORE
7-OK
8 -I'M SURE I NEED TO REGISTER MY COMPUTER
9-I THINK I GOT THE JEST THAT UPDATES ARE GOOD, RIGH?
10-17-OK
18- SEARCHING YOUR  DATABASE TO UNDERSTAND
19- STILL NEED HELP FOR THIS ONE, KIDS NEED TO TYPE A BOOK REPORT CANT PRINT WITH NO PRINTER HOOKUP INFO


SEEMS THAT ALL'S WELL FOR NOW

 WELL TROJAN.WIN32.BLACKBIRD STILL ON DESKTOP

YOU ARE THE ABSOLUTE BEST EVILFANTASY FREE COMPUTER HELP AND HOPE FOR ALL WELL THAT IS TOTALLY AWESOME AND I AM THANKFUL FOR YOUR MOST WONDERFUL HELP.

THANX AGAIN AND AGAIN INFINITY. YOU ARE TRULY  AWESOME

ANY ONE SEE THIS POST PLEASE  REMEMBER TO THANK THESE HEAVEN SENT ANGELS FOR ALL THE TIME AND PATIENCE THEY RESERVE FOR ALL OF US IN NEED OF HELP.

I NE1 HAS FAILED TO THANK ANY STAFF I GLADLY DO SO FOR THEIR SAKE.

WELL HERE'S THE RESULTS OF THE LAST COMBOFIX LOG LOOKS THE SAME BUT I HOPE THIS IS WHAT YOU NEED.






[recovering space - attachment deleted by admin]

[Carbon Dudeoxide]

Woah, turn off caps lock. It makes your posts hard to read.

[evilfantasy]

Thats the same log as you posted earlier.

I need the new one from after the instructions in Reply # 22 http://www.computerhope.com/forum/index.php/topic,57360.msg362238.html#msg362238

[hotbot3808]

OK did the steps 4 times looked for logs all same as before.

here is one with date modified as when I  did the steps but it is under type; shortcut the others are the previous sent.

[recovering space - attachment deleted by admin]

[hotbot3808]

OK new problem did the system restore from point before tool bar changes and did not restore successfully.

did many no such luck .

windows screen not showing my google toolbar  would like to get it back I could access my time line from there, now I can't.
 also windows slowly loading now.

this is aweful.

every thing was going good.

[evilfantasy]

Thats still the same log. Is combofix starting to run and then creating a new log when you drag the notepad into it?

[hotbot3808]

OK I don't know what's going on, I'm doing the steps and not sure if log is being created.  found the notepad that's being dropped but no log.  looked for combofix search under c:\combofix.txt this is all I got attached below. different date created is all I can see. different date for combofix is created as file folder but not a text doc.

PLEASE BE PATIENT. Desperately trying to get this stuff right.
very frustrating for me and probably for you as well.
THANX N E WAY.

[recovering space - attachment deleted by admin]