Laptop back from shop; still has virus

[QKK]

Just got my laptop back from the shop, and it was working fine for approximately (1) day, upon which my norton 360 informed me that a trojan gen 2 was blocked. I clicked on norton, and the cyber crime screen popped up.

 

Please help.

FRST.txt

Addition.txt

[Maniac]

Hello QKK! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

• If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
• I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
• Make sure you read all of the instructions and fixes thoroughly before continuing with them.
• Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
• Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
• Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

Open Notepad (Start => All Programs => Accessories => Notepad). Please copy the entire contents of the code box below. (To do this highlight the contents of the box, right click on it and select copy. Right-click in the open Notepad and select Paste). Save it on the same directory as FRST.exe and save it as fixlist.txt

 

HKU\censored THIS VIRUS.Achilles04\...\Winlogon: [shell] explorer.exe,C:\Users\censored THIS VIRUS.Achilles04\AppData\Roaming\cache.dat <==== ATTENTION

U2 *etadpug; "C:\Program Files (x86)\Google\Desktop\Install\{1be64ec9-fa84-4c81-8fc8-831216fb33ae}\ \...\???\{1be64ec9-fa84-4c81-8fc8-831216fb33ae}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)

2013-09-05 01:48 - 2013-08-28 20:44 - 00000000 ____D C:\ProgramData\X7sVggpn

C:\Program Files (x86)\Google\Desktop\Install\{1be64ec9-fa84-4c81-8fc8-831216fb33ae}

C:\Users\Achilles\AppData\Roaming\cache.ini

2013-08-11 18:02 - 2013-08-29 07:48 - 00000000 ____D C:\Users\Achilles\AppData\Roaming\uTorrent

DeleteJunctionsIndirectory: C:\Program Files\Windows Defender

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system

Run FRST (or FRST64 if you have the 64bit version) and press the Fix button just once and wait.

The tool will make a log (Fixlog.txt) please post it to your reply.

Reboot Normally.

[QKK]

I actually sent my computer back to the shop, and the technician did a complete hard reformat on my laptop last night.

Currently, its functioning normally, but I ran another FRST scan and was hoping you guys could take another look to make sure he caught everything.

FRST.txt

Addition.txt

[Maniac]

Looks good to me.

Here some malware prevention tips:

users.telenet.be/bluepatchy/miekiemoes/prevention.html

Safe surfing!

[LDTate]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!