I Will Have A Panic Attack If I Don't Get Help, NOW!

[seanfb91]

Okay, here it is.

[recovering disk space -- attachment deleted by admin]

[Broni]

It looks better.
This entry:
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
is gone, so you shouldn't have problem running HJT fixes now.
Follow my instructions from reply #13.
Obviously disregard any entries, which are not present anymore.

When done, post new HJT log.

[seanfb91]

Hallejuah! For now...
I believe my computer is almost fully cured! My start menu and just about everything else is back to normal EXCEPT MProtector is still on there no matter how much I try to remove it and I can't turn on my Firewall. Do I have to remove some of these programs to turn it on?

Also, I believe I won't be needing the services of Remove Restricitions Tool, but it remains everytime I reboot my computer. I can't find it under Add/Remove Programs list. How can I remove it?

[recovering disk space -- attachment deleted by admin]

[Broni]

I can't turn on my Firewall

Norton's? From HJT log, I can see it's ON.

The log looks better again, but we're not done yet.

Open HJT again, and checkmark:
- O4 - HKLM\..\Run: [RRT-Auto] C:\DOCUME~1\Sean\LOCALS~1\Temp\Temporary Directory 2 for RRT[1].zip\RRT.exe auto
- O4 - HKCU\..\Run: [HijackThis startup scan] C:\Program Files\Trend Micro\HijackThis\HijackThis.exe /startupscan
- O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
- O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
Click "Fix checked".

Restart computer.
Post new HJT log.

[seanfb91]

Here's the new HTJ log.

[recovering disk space -- attachment deleted by admin]

[Broni]

Download, and install Unlocker: http://ccollomb.free.fr/unlocker/
It'll install under right click menu.
Open Windows Explorer.
Navigate to C:\Program Files.
Right click on MyWebSearch folder. Click Unlocker
Select Delete from drop-down menu:



Click OK.
MyWebSearch will refuse to be deleted, but Unlocker will give you an option to delete on reboot.
Select that option.
Restart computer.
Post new HJT log.

[big matt]

          hello i just read this guys message and I am having the same problem I let my friend use my computer and he downloaded something and this same virus got onto my computer but before i could do what he did my computer shutdown and now it wont start windows it wont go into safe mode and all that comes on is a blue screen that tells me my computer is corrupted and it also says

*** STOP:  0x0000007B (0xf8a95528, 0x0000034, 0x00000000, 0x00000000)

if anyone could help me please i need it!!!!!!!!

[Broni]

big matt
You need to start your own topic.

[seanfb91]

Hello, I've recently been away from computer, but I'm here now, with a new problem. I don't know if it because of the virus, because all seems, (or seemed) well until the power was lost. I'm going to start another thread...