PollyKate

System restore returned my computer to operation. Now I'm going to shut it off and tomorrow I will completely delete Malwarebytes from it! It's been fun (NOT).

Can someone tell me how to do system restore, please?

I did restart the computer. It made no difference. I do not understand "post back a status" - what does that mean?

After completing Step 5, my computer is toast. No programs will run from the start button or the quick launch or the desktop icons. I got Firefox to run by finding the program and clicking on it. Complete disaster. Anybody got any ideas now?

Here's JRT.txt, attached. I hope I can get my computer back to normal after this. It's looking pretty unlikely right now. JRT.txt

Hello Ron, I followed all the instructions you gave with the following results: STEP 0 - RKill ran, no problems STEP 1 - ERUNT ran, no problems STEP 2 - The Threat Scan failed. I uninstalled and reinstalled the program, ran it again, it failed. The Scan log is attached (Scan2.txt) STEP 3 - I ran RogueKiller as instructed. It did not create a report located on my desktop, so I have attached the log. It seems that I have made no progress at all and now my computer is unprotected. I still don't understand this thing about "Astromenda" - that is not in the file that it is reported to be in. I think maybe my file got confused with someone else's. What shall I do next? thank you, PollyKate RKreport_SCN_10152014_123813.log Scan2.txt

Hello GSparks33, I'm getting more confused. I searched the FRST.txt and those lines quoted above are not in it. I went ahead and ran both TDSSKiller and the EMSIsoft Emergency Kit Scanner. The first found nothing, the second found some "no risk" and "low risk" items - adware and toolbars. I quarantined them. Malwarebytes still fails. I ran FRST.exe again and those "Astromenda" lines are still not in the new FRST.txt. Any insight would be appreciated! Thank you, PollyKate

Hello Noah, I have searched the FRST.txt and those lines you have above are not in it. That doesn't make any sense to me, can you please explain? Thank you, PollyKate

Hello, After posting that the new version failed, NCStafford has suggested that my computer has an infection, as follows: " The FRST shows this: HKU\S-1-5-21-2602612520-1628966450-300582549-1001\...\Run: [bRS] => C:\Program Files (x86)\WSE_Astromenda\BRS\brs.exe -runBRS HKU\S-1-5-21-2602612520-1628966450-300582549-1001\...\RunOnce: [WSE_Astromenda] => wscript /E:vbscript /B "C:\Users\penny\AppData\Roaming\WSE_Astromenda\UpdateProc\bkup.dat" Which sure looks like an infection --- astromenda. " Can someone help me with this problem? Many thanks, PollyKate

Hi Noah, At least I'm learning about a lot of tools I didn't know existed! Here's the link: http://we.tl/Vp1axhOffK that's to a 402MB zipped file from yesterday. Many thanks for your help! I truly appreciate your efforts! PollyKate

Hi Noah, I tried again, just starting the process monitor near the end - I got three log files and zipped they're too big to upload. So I zipped only the last two and it's attached, hopefully. Yes, the scan did end with the same error 6. Many thanks, PollyKate

Hi Noah, I zipped the logs but the zip file is too big to upload. It's 402MB, I must have done something wrong. What can I do now? Could you confirm the instructions? I thought it was: Start Procmon.exe Start scan Zip logs If that's it, I'll delete all the logs and try again...? thank you, PollyKate

Hello Noah, The first things are easy and are attached - the Protection log, Scan log and CheckResults.txt. The process log thing has me confused. I'm running a scan now and it just keeps making logs, I think I've got 11 of them and it's maybe halfway through. Do you want me to zip up ALL of those logs and post them? Thank you! PollyKate CheckResults.txt ProtectionLog.txt ScanLog.txt

Thank you! I did everything you said - uninstalled, reinstalled, ran a scan - with the same result as before, failure (error 6). The three log files - CheckResults, FRST, Addition.txt - are attached. I hope you can find the problem in there. Many thanks. CheckResults.txt FRST.txt Addition.txt

I installed the new version today and the scan fails (error 6). How can I revert to the previous version? Thanks for any help!