Ukash help please

[mom24]

My sons laptop (win7 x64) became infected with ukash on the 12/13th March. At first I could access safe mode with a command prompt but entering other safe modes restarted the computer. I followed a guide from AVG to remove it by running AVG from a usb. It found several malware files which were renamed. Now when the computer starts up normally it shows a white screen. . I am still able to access safe mode with a command prompt but other safe modes reboot the system.

Following Gringo's guide on here for windows7 (x64) I ran Farbar.

Could someone help me to repair his computer please? I'm not very computer literate but can follow simple instructions

Here are the saved files:

FRST.txt

Search.txt

[MrCharlie]

Welcome to the forum. Looking at it now....MrC

[mom24]

That was fast! Thank you very much

[MrCharlie]

OK, here you go......Please carefully carry out this procedure!!!!!!

Please download the attached fixlist.txt and copy it to your flashdrive.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

On Vista or Windows 7: Now please enter System Recovery Options. (as you did before)

Run FRST64 or FRST (which ever one you're using) and press the Fix button just once and wait.

The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

See if the computer boots normally now.

MrC

[mom24]

It worked! Again, thank you. My son (and I) are over the moon. You are a star

Its not much but I did send a small thank you - have a beer on us

Fixlog.txt

[MrCharlie]

Good...when you get a chance please run Malwarebytes Anti-Rootkit to make sure it's allgone.

Please create a new system restore point before running Malwarebytes Anti-Rootkit if you can.

Download Malwarebytes Anti-Rootkit from HERE

• Unzip the contents to a folder in a convenient location.
  
• Open the folder where the contents were unzipped and run mbar.exe
  
• Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
  
• Click on the Cleanup button to remove any threats and reboot if prompted to do so.
  
• Wait while the system shuts down and the cleanup process is performed.
  
• Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
  
• When done, please post the two logs produced they will be in the MBAR folder..... mbar-log.txt and system-log.txt
  

To attach a log if needed:

Bottom right corner of this page.

New window that comes up.

~~~~~~~~~~~~~~~~~~~~~~~

Note:

If no additional threats were found, verify that your system is now running normally, making sure that the following items are functional:

Internet access

Windows Update

Windows Firewall

If there are additional problems with your system, such as any of those listed above or other system issues, then run the fixdamage tool included with Malwarebytes Anti-Rootkit and reboot.

Verify that your system is now functioning normally.

MrC

[MrCharlie]

Any questions...please post back.

If you think I've helped you, please leave a comment > click on my avatar picture > click Profile Feed.

Take a look at My Preventive Maintenance to avoid being infected again.

Good Luck and Thanks for using the forum, MrC

[Maurice Naggar]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!