Systems Fix still present after cleaning

[AndrewMc]

Hello, I am hoping someone can help me,

I had the "systems Fix" malware on my windows XP PC and followed some forum guides to get rid of it which it seemed to have done however I am still getting browser redirects when using a search engine and MBAM is often notifying me of blocking atempts to visit various IPs

I purchased malwarebytes and did full scans but it is not detecting anything, just silently blocking those ip's

I also have installed avast and super anti spyware but nothing is being detected by those either.

I cannot run tdskiller ( it just wont load even in safemode)

atached are the dds logs as instructed, I would really apreciate if someone can help me get rid of this thing properly.

attach.txt

dds.txt

[AndrewMc]

Can anybody help?

I have the paid version of Malwarebytes antimalware and it is not cleaning or detecting whatever has taken over my browsers ( IE, chrome and Firefox)

I have atached a log file to this message from MBAM showing the list of IPs its blocking, it shows its blocking outgoing atempts every few minutes.

I really need some help with this as my pc is running so slow and Im worried to do anything yet I actually rely on my PC for my job

[AndrewMc]

protection-log-2012-01-09.txt

Can anybody help?

I have the paid version of Malwarebytes antimalware and it is not cleaning or detecting whatever has taken over my browsers ( IE, chrome and Firefox)

I have atached a log file to this message from MBAM showing the list of IPs its blocking, it shows its blocking outgoing atempts every few minutes.

I really need some help with this as my pc is running so slow and Im worried to do anything yet I actually rely on my PC for my job

[AndrewMc]

Have I done something Wrong?

Its been several days since I posted and I thought this was the correct place to get help but since nobody is helping me I am wondering if I am in the wrong place?

I see on other threads people told that if they do not reply in 3 days then their posts will be deleted but I am not even getting somebody advising me to stand by or anything..

[MrCharlie]

Welcome to the forum.

Please download Farbar Service Scanner and run it on the computer with the issue.

• 
  
• Make sure the following options are checked:
  • 
    
  • Internet Services
    
  • Windows Firewall
    
  • System Restore
    
  • Security Center
    
  • Windows Update
    

  [*]Press "Scan".

  [*]It will create a log (FSS.txt) in the same directory the tool is run.

  [*]Please copy and paste the log to your reply.

-------------

Next..........

Please download and run RogueKiller.

Choose 1 to scan the system

Post back the report.

-------------------------

Last.......

Please download OTL from one of the links below:

http://oldtimer.geekstogo.com/OTL.exe

http://oldtimer.geekstogo.com/OTL.com (<---renamed version)

Save it to your desktop.

Double click on the icon on your desktop.

Click the Scan All Users checkbox.

Push the Quick Scan button.

Two reports will open, copy and paste them in a reply here: (or attach them as .txt files)

OTL.txt <-- Will be opened

Extra.txt <-- Will be minimized

The scan will take about 10 minutes...depends on your hard drive size.

MrC

[AndrewMc]

Hello, thankyou for your help. My pc shutdown by itself when attempting the downloads and now it will not start in either normal or safe mode. It gets to loading drivers and stops at mup then flashes blue screen for a second and reboots. I built 2 boot disks from downloaded iso files after searching 1) bit defender rescue which will not load just gives an error and other kaspersky rescue disk which did run and found one Trojan and cleaned it but pc still will not boot. I then built a bar toe disk with spybot plugin and adware plugin. This is currently running a spybot scan as I write this on my iPhone and so far has listed only 2 entries security which begin with (SBI $F1AA2176 (I have no pc to access forum at the moment only iPhone). Will try and get a loaned pc today.. Any advice on using bartpe or other way to get windows to boot up?

[AndrewMc]

Spybot completed scan and found only 3 cookies (media pled) and those 2 registry entries which I let it fix. Tried running adawarese pro scan from bartpe disk but it's givIng a "runScanner error" so tried running clamwin antivirus but it is having issues updating saying first invalid dns reply falling back to http mode.

It then downloads main.inc but cant write to ./clamav-bignumberletter.clamtmp error cant download main.cvd from database.clamav.net etc.

I can navigate all files etc in bartpe if that will help us any.

But not sure what to do next

[MrCharlie]

This doesn't sound good, from your logs it seems you have run a lot of tools including ComboFix.

At the bottom of this post you'll find instructions on making an OTLPE disk, make it and see if the computer boots up with it.

http://maddoktor2.com/forums/index.php/topic,37030.0.html

MrC

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!