Cryptowall virus?

[MrCharlie]

Try re-entry if you didn't already.

If that doesn't work......download and run this uninstaller:

http://download.bleepingcomputer.com/sUBs/CF_UNINST.EXE

Then download a fresh copy of ComboFix and reboot into safe mode and try it.

MrC

[Samijo3]

When I finish downloading the last link,I click on it and a pop up says done so I click ok, but then it does nothing.

[MrCharlie]

That's all that will happen, continue on with downloading and running a fresh version of ComboFix.

MrC

[Samijo3]

Okay when I ran it this time it went all the way through and then through the backing up registry and then it does nothing else, no disclaimer and no blue screen.

[MrCharlie]

Do this instead:

Please download and run RogueKiller 32 bit to your desktop.

RogueKiller<---use this one for 64 bit systems

Which system am I using?

Quit all running programs.

For Windows XP, double-click to start.

For Vista or Windows 7-8, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Wait for the Prescan to finish

Click Scan to scan the system.

When the scan completes > Don't Fix anything! > Click on the Report Button > Copy and paste the Report back here.

Don't run any other options, they're not all bad!!!!!!!

RogueKiller logs will also be located here:

%programdata%/RogueKiller/Logs <-------W7

C:\Documents and Settings\All Users\Application Data\RogueKiller\Logs <-------XP

MrC (be abck in the AM)

[Samijo3]

Sorry that it took so long to respond.

RKreport_SCN_09252014_110817.log

[MrCharlie]

That looks OK.......lets run some different tools:

Make sure you have created a restore point and.....

Download Delfix from Here and save it to your desktop.

• Place a check mark in front of .......
• Create registry backup <---only!
• [color-red]Uncheck the rest!
• Click the Run button.

  Close the tool out when it's done....we'll use it later.

  ===========================

  Please download AdwCleaner from HERE or HERE to your desktop.

  • Double click on AdwCleaner.exe to run the tool.

    Vista/Windows 7/8 users right-click and select Run As Administrator

  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • When it's done you'll see: Pending: Please uncheck elements you don't want removed.
  • Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • Look over the log especially under Files/Folders for any program you want to save.
  • If there's a program you may want to save, just uncheck it from AdwCleaner.
  • If you're not sure, post the log for review. (all items found are either adware/spyware/foistware)
  • If you're ready to clean it all up.....click the Clean button.
  • After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of that logfile will also be saved in the C:\AdwCleaner folder.
  • Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
  • To restore an item that has been deleted:
  • Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.
  Next..................

  Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
  Next.........

  Clean out temp files:

  Download TFC from here and save it to your desktop.

  http://oldtimer.geekstogo.com/TFC.exe

  http://www.bleepingcomputer.com/download/tfc/dl/92/

  Close any open programs and Internet browsers.

  Double click TFC.exe to run it on XP (for Vista and Windows 7 right click and choose "Run as administrator") and once it opens click on the Start button on the lower left of the program to allow it to begin cleaning.

  Please be patient as clearing out temp files may take a while.

  Once it completes you may be prompted to restart your computer, please do so.

  Once it's finished you may delete TFC.exe from your desktop or save it for later use for the cleaning of temporary files.

  =====================

  Please run a Threat Scan

  Click on settings > Detection and Protection > Non-Malware Protection > PUP (Potentially Unwanted Program) detections > Make sure it's set to Treat detections as malware

  Same for PUM (Potentially Unwanted Modifications)

  Quarantine All that's found

  MrC

[Samijo3]

This is the first log from AdwCleaner.. I'm not sure what to save or what I clean.

AdwCleanerR0.txt

[MrCharlie]

It's all adware, clean it all up.

 

MrC

[Samijo3]

Here are these logs.

AdwCleanerS0.txt

JRT.txt

[MrCharlie]

Did you run a Threat scan with Malwarebytes???

MrC

[Samijo3]

For some reason Malwarebytes won't load when I click on it.

[MrCharlie]

Do a clean re-install of Malwarebytes:

https://forums.malwarebytes.org/index.php?/topic/146017-mbam-clean-removal-process-2x/ <---clean re-install

MrC

[Samijo3]

Okay I ran the threat scan and quarantined all that was found.

[MrCharlie]

Can you post the log please.

=========================

Lets see if you can run ComboFix now:
First, download and run the uninstaller for ComboFix:
http://download.bleepingcomputer.com/sUBs/CF_UNINST.EXE

Then download a fresh copy of ComboFix to your desktop
Reboot into safe mode
Click Start --> Run, and enter this command exactly as shown: (copy and paste)

"%userprofile%\desktop\combofix.exe" /nombr

See if it will run successfully now. MrC

[Samijo3]

Here is the log, I am restarting to see if the ComboFix will run.

log.txt

[Samijo3]

It still won't fully run ComboFix.

[MrCharlie]

OK...

What are you using as an anti-virus???

I want you to update and run a scan with it

MrC

[Samijo3]

I am not using an anti-virus.

[MrCharlie]

OK........please do this:

Uninstall Norton from your Programs and Features and then run the cleaner listed in the link below:

https://support.norton.com/sp/en/us/home/current/solutions/kb20080710133834EN_EndUserProfile_en_us

Download and install AVAST Free:

http://www.avast.com/index

Disable Windows Defender:

How to Disable Defender

Enable the Windows Firewall:

http://windows.microsoft.com/en-us/windows/turn-windows-firewall-on-off#turn-windows-firewall-on-off=windows-7

Update and run a scan with your new AVAST anti-virus.

MrC

[Samijo3]

I let Avast scan overnight and its still not halfway done. Is it supposed to take this long?

[MrCharlie]

Not really...depends on the size of your drive and what's on it.

 

If it's still scanning, let it go..if not stop it and try it again.

 

MrC

[Samijo3]

The scan ended up getting stopped because we lost power so I had to rescan it again and it just finished sometime last night. You want me to fix all threats?

[MrCharlie]

I want you to post the log and I'll determine if it's OK to delete them.

 

MrC

[Samijo3]

Okay.. well I didn't delete everything. I left my computer when I went to my brothers house. It doesn't show the scan results but it has a lot of things in the virus or quarantine chest.