JeanInMontana

Unless you have paid for the protection service no it is not in the task bar.

That links straight to 1.25 for me.

Hi Digerati and welcome to Malwarebytes.

Hi leeollie and welcome to Malwarebytes. I need you to find the following files, copy them to a folder you name leeollie-malware, and zip it by right clicking and choosing send to zipped folder from the context menu. C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0L2.EXE C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\oembios.exe, Attach that zipped folder to your reply please.

Hi RAVERFLUFF and welcome to Malwarebytes. Turn off TeaTimer for now. Open SB S&D Make sure you are in Advanced Mode. Click on the Mode link at the top of the program and then Advanced Mode. Click on the Tools section and then Resident. You will see two items. 1. Resident "SD helper" (Internet Explorer bad download blocker.) active 2. Resident "Tea Timer" (Protection of over-all system settings.) active. Uncheck number 2.. Leave number 1 checked always. You can enable Tea Timer again if you wish once all special fixes have been done. Update MBAM and scan in regular mode. Post that log and a log from HJT in regular mode please.

Hi and welcome to Malwarebytes. To be sure your fully clean you might want to follow these instructions http://www.malwarebytes.org/forums/index.php?showtopic=2936

Your using an outdated version of MBAM. The current version is 1.25. Where did you download from? Link please.

I need you to scan with MBAM then scan with HJT after you remove. MBAM is first then the HJT log. So please update MBAM again and run a quick scan, post that log and a new HJT log in the body of your reply.

Hello gwennypoo and welcome to Malwarebytes. Please follow the instructions here http://www.malwarebytes.org/forums/index.php?showtopic=2936

Please follow the instructions you were given exactly as they are written.

There are some incurable stuffs out there. No program is able to deal with them.

Hi bubico and welcome to Malwarebytes. Thanks for your kind words.

Should be back up now.

Smitfraudfix is a most excellent tool and has saved literally millions from Zlob trojan AKA Smitfraud. In the hands of people that don't know how to use it, most likely such as yourself, it may indeed become useless and can in fact ruin a machine. If you have experienced some sort of problem with MBAM and can provide any sort of credible substance to back that up, then please post your details in a new thread, in this forum so that it may be addressed in an adult and professional manner.

It can be malware, if you can be certain it's not in your case then just mark it to be excluded by right clicking and choosing add to ignore list.

Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Also control_tps a quick scan will remove as well as a full scan, your scanning drives malware never gets on.

Hi there Randy Howard, and welcome to Malwarebytes. Make sure your running as an administrator on the machine. Allow email from Malwarebytes.org and set your preferences in the User Control Panel to email notifications for replies to your topics. This ensures you make prompt replies back and we get you cleaned in the fastest way possible. Please set your system to show all files; Click Start. Open My Computer. Select the Tools menu and click Folder Options. Select the View Tab. Under the Hidden files and folders heading select Show hidden files and folders. Uncheck the Hide protected operating system files (recommended) option. Click Yes to confirm. Click OK. If you haven't already, please get these programs, update and run a complete scan removing all items found. Spybot Search & Destroy Be sure to use the immunize feature. But do not enable TeaTimer at this time. Open SB S&D Make sure you are in Advanced Mode. Click on the Mode link at the top of the program and then Advanced Mode. Click on the Tools section and then Resident. You will see two items. 1. Resident "SD helper" (Internet Explorer bad download blocker.) active 2. Resident "Tea Timer" (Protection of over-all system settings.) active. Uncheck number 2.. Leave number 1 checked always. You can enable Tea Timer again if you wish once all special fixes have been done. Please run a quick scan of your main drive, usually C with MBAM making sure you check all items found for removal. Please post that log in your next reply. Then go here and run a scan PandaActive Scan There is a full tutorial on how to to this at the top of this forum. Post the logs from the Panda and MBAM scans please, along with a log from this program HiJack This! You will post three logs. 1. MBAM scan. 2. Panda Active Scan. 3. HiJack This scan. Please run and post the scans in this order. You will finish the MBAM first so go ahead and post that log, then move on to Panda and so forth. I will analyze the logs and give you further instructions. Be sure to set your email to allow mail from Malwarebytes.org and your personal settings to send an email on reply to your topic. This will let you know when there has been an update to your topic and you can come and see what has been said. Be patient and persistent. These things can take time and many procedures.

Tigger93 has been here longer than I have I do believe, always helping and finally getting the status deserved!! Thanks for all you do Tigger93 and everyone please join me in a big welcome to the team!