eternalsotsm Posted June 20, 2010 ID:271164 Share Posted June 20, 2010 My siblings has reeked havoc on my dads computer. It will not run system restoreI scaned with Malwarebytes, the box will tell me to click ok, but then malware bytes disappears/shuts downIcons disappeared beforeWindows starts up but it's just a blank desktop without a taskbar or icons. You have to hit ctrl/alt/del then run and type system restore. Then error messages come up and finally you can run the system. It will not read drivesetc etcPLEASE HELP. This is CRAZY. Nothing fixes it. Every virus scan shuts down.Info is from Rootrepealfiles. I give up. ROOTREPEAL © AD, 2007-2009==================================================Scan Start Time: 2010/06/20 17:41Program Version: Version 1.3.5.0Windows Version: Windows XP SP2==================================================Hidden/Locked Files-------------------Path: C:\WINDOWS\system32\hjgruijwntkvrt.datStatus: Invisible to the Windows API!Path: C:\WINDOWS\system32\hjgruilog.datStatus: Invisible to the Windows API!Path: C:\WINDOWS\system32\hjgruinnryufox.dllStatus: Invisible to the Windows API!Path: C:\WINDOWS\system32\hjgruixptqrytr.dllStatus: Invisible to the Windows API!Path: C:\Documents and Settings\George\Application Data\SecuROMStatus: Could not get file information (Error 0xc0000008)Path: C:\WINDOWS\system32\drivers\hjgruimcyjamum.sysStatus: Invisible to the Windows API!Path: C:\Documents and Settings\George\My Documents\Downloads\USERS7~2:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}Status: Visible to the Windows API, but not on disk.Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\CabLibrary.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\CabLibrary.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\CommandParserLibrary.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\CommandParserLibrary.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\Core.Framework.Basic.Sh.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\Core.Framework.Basic.Sh.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\log4net.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\log4net.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\Uif.Splash.cl.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\Uif.Splash.cl.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\Uif.Settings.cl.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\Uif.Settings.cl.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\Uif.IUifInit.cl.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\Uif.IUifInit.cl.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\PackageManagerClient.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\PackageManager.Sh.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\PackageManager.Sh.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\PackageManagerClientLibrary.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\PackageManagerClientLibrary.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\SerializableDictionary.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\SerializableDictionary.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\UI.Framework.Sh.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\UI.Framework.Sh.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\UIExec.46954.exe.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\UIExec.46954.exe.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\UIExec.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\PackageManagerClient.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\UIExec.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\UtilityLibrary.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\UtilityLibrary.manifestStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\zlib.net.cdf-msStatus: Locked to the Windows API!Path: C:\Documents and Settings\George\Local Settings\Apps\2.0\L9TK9Q3H.NTG\NBRMMELC.BPR\manifests\zlib.net.manifestStatus: Locked to the Windows API! Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 20, 2010 Root Admin ID:271167 Share Posted June 20, 2010 Hello , and welcome to Malwarebytes.orgWe don't work on Malware removal in the general forums. Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. One of the expert helpers there will give you one-on-one assistance when one becomes available.After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now