lowen

Hi Elise Have had a lot of sleepless nights over the laptop. a big thank you to you for your persistence. How do I remove DDS (what is this?) GMER and OTL - all through add & remove programmes?? I have a firewall on the computer and my antivirus (McAfee) updates at start up. I will keep Spybot and Malware on the computer. Do you have to manually run Malware or does it do it automatically?? Did not know about the windows & java updates being so important. Will tell everyone I know about that! I will let you know how I get on tonight removing all the software.

have attached file - found yet another virus! am confused as so many different products all seem to be finding trojans. why is that?? eset.txt.txt

Thanks Elise Have downloaded Java and will run next scan tomorrow night.

Have run Spybot Malwarebyte (found Malware.Packer.gen and GenericFakeAlert!ip) Windows Defender (found Win32/FakeCog) and McAfee (which also found the Generic fake but a different version. http://www.microsoft.com/security/portal/T...threatid=140896 A little paranoid as I had run all the anti malware software and they came up clear and now I have more trojans!!!!............argh! Extras.Txt OTL.Txt

Hi Elise Am able to download programmes that you choose where to put ie desktop. Cannot load any programmes to the temp folder as McAfee blocks have found the names of the trojans that were on the machine DNSchanger.as DNSchanger.bf patched-MSCVRT Generic FakeAlert.b ExploitCVE 2009 3869 The machine seems to be working ok. I have logged on as the user that had all the problems. the only thing is that when I clear all the temp files/cookies in internet explorer when you click the down arrow on the address there is nothing there. however a while later all the sites that have been searched for appear once more.

flush did not reveal anything. have uploaded file and deleted all the work IP addresses. have a good weekend. Log1.txt

file as requested. I am a little concerned with the second file as it gives all the IP addresses for the work network. OTL._3Txt.txt

sorry forgot to say that connection via router.

Here's the log but I dont know if it is ok because have not uninstalled McAfee again (and still cannot disable) and I think it blocked one of the actions by OLT. Checked to see if I could download another virus software - Housecall (and yes it did download). Could not install F-secure because it runs directlly onto the laptop (in other words has to be downloaded via the internet and not via an external drive). Thanks for all your help but we dont seem to be any further on than we were at the beginning of the week. I have the reload disks for the machine but the only problem is that it is for Windows Vista and I had the operating system changed to XP when I ordered the laptop. If I reload how do I change it to XP? OTL_2.Txt

Am trying again. Have moved it from a temp file to desktop (as McAfee stopped it working) but it is still not working.

Hi Does not work because it is not the consumer version that it running. Work pays for all home laptops to have McAfee professional version.

Dont think that this is the problem. I cannot download any programmes direct to the laptop. I have to use another machine and put in onto an external hard drive. Cannot even get the webpage open for the McAfee site.

I have not checked again but before I could not roll back the computer to an early state. Let's try to uninstall McAfee and see if that works.

I have reinstalled McAfee and because there are no administrator rights you cannot disable the software - it is greyed out. In other words the computer does not recognise you as an administrator. It is the same for any user - and even added new user and still does not work. Had problems downloading software as well. Any ideas??

COMBIlog.txt

Hi Elise Ran Combo last night but would not allow connection to the internet. Had internet connection before running Combo but as soon as you run it it closes the connection and does not work until a reboot- and therefore unable to download recovery console from Microsoft. Tried to find the download from the Microsoft site to put in on manually but can't find it. Have had to remove all virus software as could not disable (as no administrator rights) Unable to download any programs from internet to computer now. I get the feeling that it might be just worth reloading windows onto the machine and over-write everything. What do you think?? Have attached the log file log.txt

Have attached txt file - hope this helps. gmer.txt

Hi Elise Bad day at the office!! Obviously running in Safemode does not pick up everything. I am now running again logged on as administrator and already there is something on the screen. Will send another reply when the scan is complete.

Ran GMER in Safemode and at the end of the scan there was nothing on the screen. It took about 9 hours to run.

HI Elise Thanks for the quick response. I have downloaded the program to an external drive and it has now run. Here is the file. gmer_.txt

Have tried to run in Safe mode but still comes up with error not a valid Win32 application. Yes proxy is correct. Sorry to have sent a couple of times - new to this!!

Hi Elise Have run the first program and attached the logs. However cannot run second program as it comes up with error not a Win 32 programme. Hope you can help! Extras.Txt OTL.Txt

OTL.Txt OTL.Txt

I had virus/trojans and have managed to run Spybot and Malwarebyte but I have lost my administrator rights. Any clues??