I have no clue what im doing

[evilfantasy]

The amount of malicious entries on this computer could be causing any number of side issues. Lets clean the malware then troubleshoot anything that might be still not working.

[alspach06]

My speakers are fixed I dont need any help with those anymore thank you though. I downloaded SDFix I see the icon on my desktop and I recieved the notepad with futher instructions, so I restarted my computer got into safe mode and logged onto the Administrators account, when it loaded there was no SDFix icon, I went to start>run typed in C:\SDFix\RunThis.bat and this is the message that I recieved " C:\SDFix\RunThis.bat refers to a location that is unavailable. It could be on a hard drive on this computer or on a network. Check to make sure that the disc is properly inserted, or that you are connected to the internet or your netwrok, and then try again. If it still cannot be located, the information might have been moved to a different location" so I thought to try it in safe mode under my account where I can see the SDFix icon on my desktop but I recieved the same message.

[evilfantasy]

I realize time is sometimes precious but you really should take care of this ASAP. There is a LOT of bad files to clean up on the computer.

You have to run it from the same account you installed it from. Did you do that?

Try this please. From the same account you installed it on...

Running SDFix in Normal Mode

• Open the SDFix folder and double-click RunThis.bat to start the script or go to Start > Run and type: C:\SDFix\RunThis.bat, then press Ok.
  
• Type S, then press Enter to switch to the safe mode menu screen.
  
• Type Y to begin the cleanup process.
  
• Please be patient as the scan may take up to 20 minutes to complete.
• SDFix will remove any Trojan services or registry entries found, then prompt you to "press any key..." to Reboot.
  
• At this point, Press any key to continue and restart the computer.
  
• When the computer restarts, the tool will run again to complete the removal process.
• When the script is complete, it will display Finished...press any key...
  
• Again, Press any key to end the script and load your desktop icons.
  
• Once the desktop icons load, The SDFix report log (Report.txt) will open in Notepad and automatically be saved in the SDFix folder.
• Please copy and paste the contents of Report.txt in your next reply.

[alspach06]

when i downloaded the SDFix program it saved on my desktop so when i tried to open it a box comes up saying the publisher could not be verified are you sure you want to run this? then there is the option to run or cancel when i run it this comes up


SDFix has been extracted to %systemdrive%\SDFix\
(Drive that contains the Windows directory - typically C:\SDFix)

Open the SDFix folder in Safe Mode and double click the RunThis.bat file to start the fixtool
If RunThis.bat is started in Normal Mode, options to download and run Anti-Virus command line scanners are displayed

Catchme.exe Stealth Malware Detector by GMER is also included in the SDFix folder

Additional SDFix Instructions & screen shots can be found here - http://www.bleepingcomputer.com/forums/topic131299.html





SDFix a été extrait dans %systemdrive%\SDFix\
(Le disque qui contient le répertoire Windows - typiquement C:\SDFix)

Ouvrez le dossier SDFix en mode sans échec et double cliquez sur le fichier RunThis.bat pour démarrer l'outil.
Si RunThis.bat est lancé en mode normal, les options pour télécharger et lancer les scanners Antivirus en ligne de commande seront affichées

Catchme.exe Stealth Malware Detector de GMER est également inclus dans le dossier SDFix

Instructions supplémentaires pour SDFix & captures d'écran peuvent être trouvées ici - http://www.bleepingcomputer.com/forums/topic131299.html






SDFix wurde nach %systemdrive%\SDFix\ entpackt
(Das ist das laufwerk welches den Windows Ordner enthält - normalerweise c:\SDFix)

Öffe den SDFix Ordner im Abgesicherten Modus und doppelklicke zum starten die RunThis.bat Datei
Sollte die RunThis.bat im normalen Modus gestartet werden, wird einem die Möglichkeiten geboten Antivirenscanner für die Kommandozeile
 (Dosbox) downzuloaden.

Das Programm Catchme Malware Detector von Gmer ist auch im SDFix Ordner enthalten.

Zusätzliche SDFix Anleitungen und Screen Shots können hier nach geschaut werden: http://www.bleepingcomputer.com/forums/topic131299.html


when i type in C:\SDFix\RunThis.bat i still get the same message

[evilfantasy]

Did you try my above suggestion of Running SDFix in Normal Mode? http://www.computerhope.com/forum/index.php/topic,81147.msg539016.html#msg539016

If that does not work we will move on to something else.

[alspach06]

everything i just wrote you was in normal mode

[alspach06]

thats the stuff that comes up when i tried to open the SDFix program

[evilfantasy]

OK thanks. We will move on then.

You might need two posts to get all of the next 3 logs in and if so that's fine. I was hoping SDFix would work so we could avoid the extra scans but all of this should go pretty fast.

Download HostsXpert

• Unzip HostXpert to your Desktop
  
• Open up the HostXpert program.
  
• Make sure that the "Make Hosts Writable?" button in the upper right corner is enabled.
  
• Click Create Back Up
  
• Then click on Restore Microsoft's Host Files
  
• Close the HostXpert program

.
Note: if you use SpywareBlaster, Spybot and/or IE-SPYAD, it will be necessary to re-install the protection they afford. For SpywareBlaster, run the program and select Enable all protection. For Spybot run the program and select Immunize. For IE-SPYAD, run the batch file and reinstall the protection.

----------

Download Malwarebytes' Anti-Malware (MBAM)

Alternate MBAM download link

• Double-click mbam-setup.exe and follow the prompts to install the program.
  
• At the end, be sure a checkmark is placed next to the following:
• Update Malwarebytes' Anti-Malware
  
• Launch Malwarebytes' Anti-Malware

• Then click Finish.
  
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select Perform quick scan, then click Scan.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Be sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy and Paste the entire report in your next reply.

.
Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

----------

Download DDS by sUBs and save it to your desktop. Alternate DDS download link

Vista users right click on dds and select Run as administrator (you will receive a UAC prompt, please allow it)

* XP users Double click on dds to run it.
* If your antivirus or firewall try to block DDS then please allow it to run.
* When finished DDS will open two (2) logs.

1) DDS.txt
2) Attach.txt

* Save both logs to your desktop.
* Please copy and paste the entire contents of both logs in your next reply.

Note: DDS will instruct you to post the Attach.txt log as an attachment.
Please just post it as you would any other log by copy and pasting it into the reply.

----------

Next post please add

• MBAM log
  
• Both DDS logs

[alspach06]

what the heck does "unzip" hostxpert to your desktop mean? how do i do that haha.. i downloaded it and a folder came up that has an icon of a folder with hostxpert underneath it to the left in folder tasks it says extract all files... is this whats supposed to be there

[evilfantasy]

Just double click it and it should open.

[alspach06]

ok when i opened it i see some of the buttons you were talking about but i got a warning that says your HOSTS file is marked as "system file" and can NOT be manipulated. press OK to remove the system file attribute, cancel to quit. ****HostsXpert will NOT reset these attributes****

do i want to say ok or cancel?

[evilfantasy]

No just exit out of that and go on to the next scan with MalwareBytes. We will take care of that later after some cleanup has been done.

[Geek-9pm]

Hello again, alspach06.

How much did you pay for the speakers?
How much effort do you want to make them work?
Are you sure the problem is a virus? How do you know?
There is a diagnostics program the runs off of a boo table CD.
It is not affected by virus. If it does not work, this would indicate that your Windows system has been damaged oo something.
 

[evilfantasy]

My speakers are fixed I dont need any help with those anymore thank you though.

 

[Geek-9pm]

Insert Quote
Quote from: alspach06 on Today at 12:40:57 PM
My speakers are fixed I dont need any help with those anymore thank you though.

evilfantasy:

Hurry, break his computer NOW!
Before somebody closes this thread!