gazzer77

Farbar Recovery Scan Tool (x86) Version: 29-12-2012 Ran by G at 2012-12-31 07:55:00 Running from G:\ ================== Search: "services.exe" =================== C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe [2012-08-23 07:43] - [2009-04-11 01:28] - 0279552 ____A (Microsoft Corporation) D4E6D91C1349B7BFB3599A6ADA56851B C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe [2012-08-23 02:35] - [2008-01-19 01:33] - 0279040 ____A (Microsoft Corporation) 2B336AB6286D6C81FA02CBAB914E3C6C C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6000.16386_none_cd28fe6bd05df036\services.exe [2006-11-02 03:35] - [2006-11-02 04:45] - 0279552 ____A (Microsoft Corporation) 329CF3C97CE4C19375C8ABCABAE258B0 C:\Windows\System32\services.exe [2012-08-23 07:43] - [2009-04-11 01:28] - 0279552 ____A (Microsoft Corporation) D4E6D91C1349B7BFB3599A6ADA56851B === End Of Search ===

essentalssas i hae Trojen:JS/Medfos.B

this somthing wjon't let me run any thing i hav no control of my system combo fix i got the same error a device attached to the system isnot

about to run combo fix , windows firewall i could no access. unknon error

no printing , that some how screwed up . windows shut down some files i think because of theat. i'll writ it

This is getting better, open f8 repair this computer and I get stopped at user page said other user pressed on it, eventual it prompts me for user and pass. I give doesn’t work. Some times it tries to work but no. I had to boot up normally now here we are.

ok give me a chance please.

i just tried to uninstall google chrome and the system shut down to prevent damage.

i ha ve not tried to stop script blocking. is there instruction to do it ?

sorry no i tried to and for each of the programs i get a error ,, a device attached to this system is not working

i'm thinking still periodically secruity essentials pop up and says it's taking action anganst threats but you don't have to take action. if they are getting reports i suppose they will update the software to eleminate the threat sooner or later. but i don't really know that. -

Hi. Good to hear from you, mr gringo. My computer is slow to load some web sites then they stop loading And don't come. Security essentials keeps coming up saying detecting threats no action is required And it's cleaning the infection I suppose. But this happens all through me browsing the Internet. I also on its scan reveled a bunch of Trojan sif-ect. ect. A b c win 32, I could Get it exactly if you need. Microsoft is intervening, asking me through security essentials To send files it picks and in a prompt box I view and send the files Ms says it doesn’t Recognize. Also they have let me know they are aware and don’t know what to do but working on it. I mean to say ms have my permission to explore the computer if you know what I mean. I don’t know what to say more in my short description of the problem. I’m here and willing to take direction thanks G i'll be running the downloads directly and post texts. Never mind each time I try to run any of these I get an error a device attached to the system is not functioning. also i ave no option to run as administrator.

I couldent run dds. but this log Mbam , here it is. Malwarebytes Anti-Malware 1.70.0.1100 www.malwarebytes.org Database version: v2012.12.30.08 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 G :: G-PC [administrator] 12/30/2012 2:05:41 PM MBAM-log-2012-12-30 (14-34-20).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 266986 Time elapsed: 28 minute(s), 12 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 1 C:\Users\G\AppData\Roaming\apretr.dll (Trojan.Agent) -> No action taken. Registry Keys Detected: 2 HKCU\Software\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj (PUP.FunMoods) -> No action taken. HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj (PUP.FunMoods) -> No action taken. Registry Values Detected: 1 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|apretr (Trojan.Agent) -> Data: rundll32.exe "C:\Users\G\AppData\Roaming\apretr.dll",MShutDown -> No action taken. Registry Data Items Detected: 2 HKCR\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32| (Trojan.0Access) -> Bad: (C:\$Recycle.Bin\S-1-5-18\$499c0eebe2d40468d3d1495d0a3bcbba\n.) Good: (fastprox.dll) -> No action taken. HKCR\CLSID\{FBEB8A05-BEEE-4442-804E-409D6C4515E9}\InProcServer32| (Trojan.0Access) -> Bad: (C:\$Recycle.Bin\S-1-5-21-633011263-2948650064-3403545423-1000\$499c0eebe2d40468d3d1495d0a3bcbba\n.) Good: (shell32.dll) -> No action taken. Folders Detected: 0 (No malicious items detected) Files Detected: 8 C:\Users\G\AppData\Roaming\apretr.dll (Trojan.Agent) -> No action taken. C:\$RECYCLE.BIN\S-1-5-18\$499c0eebe2d40468d3d1495d0a3bcbba\n (Trojan.0Access) -> No action taken. C:\$RECYCLE.BIN\S-1-5-21-633011263-2948650064-3403545423-1000\$R1NBBSV.exe (PUP.Adware.Agent) -> No action taken. C:\$RECYCLE.BIN\S-1-5-21-633011263-2948650064-3403545423-1000\$RBFSKNA.exe (PUP.Adware.Agent) -> No action taken. C:\$RECYCLE.BIN\S-1-5-21-633011263-2948650064-3403545423-1000\$499c0eebe2d40468d3d1495d0a3bcbba\n (Trojan.0Access) -> No action taken. C:\Users\G\AppData\Local\Temp\1A81.tmp (Trojan.Agent.NIX) -> No action taken. C:\Users\G\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cjpglkicenollcignonpgiafdgfeehoj_0.localstorage (PUP.FunMoods) -> No action taken. C:\Users\G\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cjpglkicenollcignonpgiafdgfeehoj_0.localstorage (PUP.FunMoods) -> No action taken. (end)