I know someone here can help...plz

[t308madness]

I have the "hijack.nofolderoptions" bug. I have a fairly new version of Malwarebytes, and when I run it I get 1 problem. HKEY_CurrentUser\Software\Microsoft\Windows\Currentversion\Policies\Explorer\nofolderoptions

I can do the reboot,scan, and its still there. Also, internet explorer doesnt work(im on a diff pc), Mcafee2011 wont run. I cant run System Restore. Everything seems to be turned off. I found this in Regedit but didnt know what to do with it. I would really appreciate any help. Also, when the pc boots up, I immediately get this message " error loading c:\windows\system32\kksc5sqdll. Is all of this caused by the same bug? I googled the "hijack.nofolders" thing and found references to a couple of viruses, but i cant run my Brand NEW mcafee. Thanks in advance.

[screen317]

Hi and welcome to Malwarebytes.

Please update MBAM, run a Quick Scan, and post its log.

Next, download DDS by sUBs and save it to your Desktop.

Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post DDS.txt directly into your reply.

[t308madness]

thanks , i will have on here in 10 mins or so.

[t308madness]

DDS.txt

[t308madness]

not sure how to do this

[t308madness]

mbam_log_2010_11_30__21_34_59_.txt

[screen317]

Hi,

Your version of MBAM is out of date. Are you having issues updating it?

[t308madness]

When I try to update , I get this.....MBAM_ERROR_UPDATING(12007,0,winhhpsendrequest) But like I mentioned, my internet explorer isnt working. It appears I still have a good connection with the internet however.

[t308madness]

Also I am unable to run System Restore. I get a message that says it has been "turned off. Contact domain admin". What the heck is that? When I try to run Macafee, it wont start. Im really stuck with this.

[screen317]

Hi,

Is Internet Explorer the only browser affected? Can you connect successfully with Firefox? How are you connected? Describe your home network.

Please visit this webpage for instructions for running ComboFix:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

• When the tool is finished, it will produce a report for you.
  
• Please post the C:\ComboFix.txt along with a new DDS log so we may continue cleaning the system.
  

-screen317

[t308madness]

Internet explorer is the only browser on the pc. My network is basically a desktop(the one im on) hooked to a wireless router and then to my modem. The pc with the problem has a usb wireless adapter on it.

[t308madness]

Oh by the way, I dont know if it means anything but I turned the pc on, and I DIDNT get the "error loading c:\windows\system32\kksc5sq.dll" message.

[t308madness]

I downloaded ComboFix. When I try to run it I get this message.."Windows cannot access the specified device, path, or file. You may not have the appropriate permissions". Whats next, ahahah, is my pc just going to melt down, ahahah.

[screen317]

Hi,

Delete your copy of ComboFix. I would like you to try downloading ComboFix again. Except this time, before you download it, rename it to t308madness.com; save it to your PC's Desktop.

Next, please reboot to Safe Mode (tap the F8 key just before Windows starts to load and select the Safe Mode option from the menu).

Navigate to Start --> Run, and enter this command exactly as shown:

"%userprofile%\desktop\t308madness.com" /killall

Press OK and ComboFix should run fine now. If not, let me know and we'll proceed in another direction.

[t308madness]

combo_fix_file__1.txtDDS.txtIt ran as soon as I downloaded it. No problems second time.

[t308madness]

I dont understand how to upload it so that it looks right, easier to read.

[t308madness]

If I completely whiped out the hard drive or replaced it, do you think that would get rid of this problem? I want to make sure it isnt in deeper, like the mother board or something.

[screen317]

Yes formatting the hard drive and reinstalling Windows would suffice if you don't want to continue this process.

If you want to keep going,

• Download the file TDSSKiller.zip and extract it into a folder on the infected PC.
  
• Execute the file TDSSKiller.exe by double-clicking on it.
  
• Wait for the scan and disinfection process to be over.
  
• When its work is over, the utility prompts for a reboot to complete the disinfection.
  

By default, the utility outputs runtime log into the system disk root directory (the disk where the operating system is installed, C:\ as a rule).

The log is like UtilityName.Version_Date_Time_log.txt.

for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt.

Please post that log here.

Next, please run a free online scan with the ESET Online Scanner

Note: You will need to use Internet Explorer for this scan.

1. Tick the box next to YES, I accept the Terms of Use.
   
2. Click Start
   
3. When asked, allow the ActiveX control to install
   
4. Click Start
   
5. Make sure that the options Remove found threats and the option Scan unwanted applications is checked
   
6. Click Scan
   Wait for the scan to finish
   
7. Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
   
8. Copy and paste that log as a reply to this topic
   

Next, download my Security Check from here or here.

• Save it to your Desktop.
  
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.
  

Let me know how things are running now and what issues remain.

-screen317

[t308madness]

Since the pc still wont access internet, the ESET Online scanner may be a problem, but I will try the other things .

[screen317]

Hi,

Click Start --> Run, and enter this command:

cmd.exe

In the black box that appears, enter this command:

netsh winsock reset

Press Enter.

When it completes, restart your computer and see if you can connect now. If no joy, continue with the other steps (minus the ESET scan).

-screen317

[screen317]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!