28 replies to this topic

[LDTate]

Next:
Note: if the Cure option is not there, please select 'Skip'.

Please read carefully and follow these steps.

• Download TDSSKiller and save it to your Desktop.
  
• Extract its contents to your desktop.
  
• Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  
  
  
  
  
  
• If an infected file is detected, the default action will be Cure, click on Continue.
  
  
  
  
  
  
• If a suspicious file is detected, the default action will be Skip, click on Continue.
  
  
  
  
  
  
• It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  
  
  
  
  
  
• If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  
• If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

please post the contents of that log TDSSKiller log.

Also please describe how your computer behaves at the moment.

[teamodave]

I have downloaded and unzipped the files but for some reason, it will not run when I double click.

[LDTate]

Download aswMBR.exe ( 511KB ) to your desktop.

Double click the aswMBR.exe to run it

Click the "Scan" button to start scan


On completion of the scan click save log, save it to your desktop and post in your next reply

[teamodave]

Here's the log:

aswMBR version 0.9.5.256 Copyright© 2011 AVAST Software
Run date: 2011-05-12 10:49:07
-----------------------------
10:49:07.281 OS Version: Windows 5.1.2600 Service Pack 2
10:49:07.281 Number of processors: 1 586 0x209
10:49:07.281 ComputerName: HOMECOMPUTER UserName: Dad
10:49:09.093 Initialize success
10:49:23.843 Disk 0 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-4
10:49:23.859 Disk 0 Vendor: Maxtor_6Y080L0 YAR41BW0 Size: 76293MB BusType: 3
10:49:23.875 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T1L0-c
10:49:23.890 Disk 1 Vendor: WDC_WD5000AAKB-00H8A0 05.04E05 Size: 476940MB BusType: 3
10:49:27.937 Disk 2 MBR read successfully
10:49:27.953 Disk 2 MBR scan
10:49:27.984 Disk 2 Windows XP default MBR code
10:49:28.000 Disk 2 MBR hidden
10:49:30.031 Disk 2 scanning sectors +976768065
10:49:30.046 Disk 2 scanning F:\WINDOWS\system32\drivers
10:49:39.875 Service scanning
10:49:48.062 Disk 2 trace - called modules:
10:49:48.093 ntoskrnl.exe CLASSPNP.SYS disk.sys USBSTOR.SYS hal.dll usbhub.sys USBPORT.SYS usbehci.sys
10:49:48.109 1 nt!IofCallDriver -> \Device\Harddisk2\DR4[0x89965250]
10:49:53.843 3 CLASSPNP.SYS[f763805b] -> nt!IofCallDriver -> \Device\00000056[0x89991290]
10:49:54.187 5 USBSTOR.SYS[bace5706] -> nt!IofCallDriver -> \Device\USBPDO-5[0x89985de8]
10:49:54.484 7 usbhub.sys[f76f7504] -> nt!IofCallDriver -> \Device\USBPDO-4[0x89a85030]
10:49:54.812 Scan finished successfully
10:50:14.312 Disk 2 MBR has been saved successfully to "F:\Documents and Settings\Dad\Desktop\MBR.dat"
10:50:14.328 The log file has been saved successfully to "F:\Documents and Settings\Dad\Desktop\aswMBRlog.txt"

[LDTate]

Lets see if it's an add-on for IE that's causing the issues.

You can open Internet Explorer without add-ons in 2 ways. One way to open is to navigate to start menu-> All Programs-> Accessories-> System Tools-> Internet Explorer (no Add-ons). This opens up IE without ActiveX controls and browser extensions.


•Type iexplore –extoff in the Run box on the Start menu
•Click “Internet Explorer (No Add-ons)” under All Programs -> Accessories -> System Tools
•Right-clicking the IE icon on the Start Menu (if IE is your default browser) and selecting “Browse Without Add-Ons”

[teamodave]

Ok, Iv'e got IE running with no add ons.

[LDTate]

I don't know which one (ones) are causing the issue.
I would disable all, enable a couple at at time and see what causing the issues.
You'll need to close IE with every chnage you make.

[LDTate]

Do you still need help with this?

[LDTate]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!