topsnipe61

1. Downloaded and ran TFC. 2. Downloaded and Ran MSRT. Here is log --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v3.3, January 2010 Started On Sat Jan 23 09:29:13 2010 WARNING: Security policy doesn't allow for all actions MSRT may require.->Scan ERROR: resource process://pid:2580 (code 0x00000057 (87)) Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Sat Jan 23 09:30:44 2010 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v3.4, February 2010 Started On Sat Feb 13 02:34:39 2010 WARNING: Security policy doesn't allow for all actions MSRT may require. Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Sat Feb 13 10:21:42 2010 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v3.5, March 2010 Started On Sat Mar 27 20:20:12 2010 WARNING: Security policy doesn't allow for all actions MSRT may require. Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Sat Mar 27 20:22:00 2010 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v3.8, June 2010 Started On Sun Jun 20 18:59:33 2010 WARNING: Security policy doesn't allow for all actions MSRT may require.->Scan ERROR: resource process://pid:3376 (code 0x00000057 (87)) Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Sun Jun 20 19:02:39 2010 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v3.9, July 2010 Started On Thu Jul 15 15:03:21 2010 WARNING: Security policy doesn't allow for all actions MSRT may require.-> Sysclean ERROR: Internal error, code = 80508015 Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Thu Jul 15 15:05:50 2010 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v3.10, August 2010 Started On Wed Aug 11 21:11:40 2010 WARNING: Security policy doesn't allow for all actions MSRT may require.-> Sysclean ERROR: Internal error, code = 80508015 Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 11 21:16:28 2010 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v3.11, September 2010 Started On Thu Sep 16 11:03:04 2010 WARNING: Security policy doesn't allow for all actions MSRT may require. Engine internal result code = 80508015 Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Thu Sep 16 11:07:47 2010 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v3.12, October 2010 Started On Wed Oct 13 03:01:48 2010 WARNING: Security policy doesn't allow for all actions MSRT may require. Engine internal result code = 80508015 Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Wed Oct 13 03:05:04 2010 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v3.13, November 2010 Started On Wed Nov 10 14:04:13 2010 ->Scan ERROR: resource process://pid:216 (code 0x00000057 (87)) ->Scan ERROR: resource process://pid:4684 (code 0x00000057 (87)) ->Scan ERROR: resource process://pid:3992 (code 0x00000057 (87)) ->Scan ERROR: resource process://pid:6780 (code 0x00000057 (87)) ->Scan ERROR: resource process://pid:6896 (code 0x00000057 (87)) Engine internal result code = 80508015 Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Wed Nov 10 14:17:08 2010 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v3.14, December 2010 Started On Wed Dec 15 20:40:41 2010 Engine internal result code = 80508015 Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Wed Dec 15 20:43:42 2010 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v3.14, December 2010 Started On Tue Dec 21 00:24:27 2010 Extended Scan Results ---------------- ->Scan ERROR: resource file://C:\hiberfil.sys (code 0x00000020 (32)) ->Scan ERROR: resource file://C:\pagefile.sys (code 0x00000020 (32)) No infection found as part of the extended scan Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Tue Dec 21 07:28:15 2010 Return code: 0 (0x0) 3. Ran EXEHELPER. Here is log exeHelper by Raktor Build 20100414 Run at 07:32:03 on 12/21/10 Now searching... Checking for numerical processes... Checking for sysguard processes... Checking for bad processes... Checking for bad files... Checking for bad registry entries... Resetting filetype association for .exe Resetting filetype association for .com Resetting userinit and shell values... Resetting policies... --Finished-- 4. Attempted to download and run COMBOFIX twice. Ensured ANTIVIRUS and ANTIMALWARE were off both times. Once file downloaded and I tried to launch using the command line provided it brought up a progress bar and then said some installation files were corrupt and to get a fresh copy of COMBOFIX. Tried twice no luck. I am standing by for more direction.

- closed antivirus and antimalware and attempted to run again without luck. Attached are all logs generated to-date arkq.txt Attach.txt DDS.txt

Attempting to remove System Tool 2011 per instructions on forum. Downloaded MALWAREBYTES and ran successfully. Found 4 items but not SYSTEM TOOL 2011. Running Windows XP on HP MINI. SYSTEM TOOL 2011 is only affecting one user of six on computer. I have run MALWAREBYTES as adminsitrator, under affected user access in safe mode and regular mode. Affected user still showing systems. Continued with instructions for when MALWAREBYTES does not solve the problem. Ran Defogger, Ran DDS, download attempted to run GMER. GMER started and then failed twice now it locks up the compute. Attempted to run in safemode but still locks computer. Really Really starting to annoy me. help please.