I am infected. Can't get rid of it.

[neylaur]

Hi! I did launched dds.scr in safemode.

I can't get rid of a malware that is closing the MSE antivirus and the Security Service.

I did got scanned multiple ties with combifix in normal and safe mode with no luck. Combofix found some malware but it reapeared after startup.

I've attached ds.txt and attach.txt

Please let me know if you can help me.

Thank you!

attach.txt

dds.txt

[MrCharlie]

#1...you shouldn't be running ComboFix without proper guidance:

http://www.bleepingc...opic273628.html

#2....Before we proceed further, please uninstall or disable uTorrent and any other peer-to-peer filesharing app.

Continued use of filesharing or ill-advised downloads will surely re-infect your system.

Risks of File-Sharing Technology.

P2P file sharing: Know the risks

It's also against the forums policy concerning P2P programs:

If you're using Peer 2 Peer software such as uTorrent or similar you must either fully uninstall it or completely disable it from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

------------------------------------

Then.....................

Please remove any usb or external drives from the computer before you run this scan!

Please download and run RogueKiller to your desktop.

Quit all running programs.

For Windows XP, double-click to start.

For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.

When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

MrC

Please don't run any other scans, download, install or uninstall any programs while I'm working with you.

Please stick with me until I give you the "all clear".

------->Your topic will be closed if you haven't replied within 3 days!<--------

(If I don't respond within 24 hours, please send me a PM)

[neylaur]

Thank you for your response and instructions. After struggling with it for almost 5 hours I've ended in reinstalling windows 7.

I am sorry for the disturbance.

Keep it up!

[MrCharlie]

OK.............

Take a look at My Preventive Maintenance to avoid being infected again.

Good Luck and Thanks for using the forum, MrC

[neylaur]

Thank you very much for the Preventive Maintenace.

I'll keep the tips.

Best regards.

Lorenzo NEY

[Maurice Naggar]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!