dhrock Posted December 2, 2010 Author ID:355326 Share Posted December 2, 2010 iiDDS (Ver_10-11-27.01) - NTFSx86 MINIMAL Run by standrews at 16:55:10.34 on Thu 12/02/2010Internet Explorer: 8.0.6001.18928 BrowserJavaVersion: 1.6.0_16Microsoft Link to post Share on other sites More sharing options...
LDTate Posted December 2, 2010 ID:355329 Share Posted December 2, 2010 mRun: [synchronEyes 7.0 Help Service] c:\program files\synchroneyes student 7.0\SynchronEyesClient.exeOK. I need you to tell me about this computer. I have only seen this used on Student computers that are owned by a school district.Is this "your" computer or what? Link to post Share on other sites More sharing options...
dhrock Posted December 2, 2010 Author ID:355331 Share Posted December 2, 2010 This is my personal computer that I use for school. I own it. However in order to use it at school I had to have that program installed on it. Link to post Share on other sites More sharing options...
LDTate Posted December 2, 2010 ID:355336 Share Posted December 2, 2010 I'll post back in about 15 minutes with a fix. Link to post Share on other sites More sharing options...
dhrock Posted December 2, 2010 Author ID:355337 Share Posted December 2, 2010 Alright, thank you. Sorry for the miscommunication about the computer. Link to post Share on other sites More sharing options...
LDTate Posted December 2, 2010 ID:355344 Share Posted December 2, 2010 Copy/paste the text in the Codebox below into notepad:Here's how to do that:Click Start > Run type Notepad click OK.This will open an empty notepad file: Take your mouse, and place your cursor at the beginning of the text in the box below, then click and hold the left mouse button, while pulling your mouse over the text. This should highlight the text. Now release the left mouse button. Now, with the cursor over the highlighted text, right click the mouse for options, and select 'copy'. Now over the empty Notepad box, right click your mouse again, and select 'paste' and you will have copied and pasted the text. KillAll::DDS::c:\windows\system32\config\systemprofile\appdata\local\lhnetjqms\lkrjfudtssd.exec:\windows\system32\config\systemprofile\appdata\local\lhnetjqmsFile::c:\windows\system32\config\systemprofile\appdata\local\lhnetjqms\lkrjfudtssd.exeC:\WINDOWS\system32\cryptnet32.dllFolder::c:\windows\system32\config\systemprofile\appdata\local\lhnetjqmsRegistry::[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet32]Save this file to your desktop, Save this as "CFScript" Here's how to do that:1.Click File;2.Click Save As... Change the directory to your desktop;3.Change the Save as type to "All Files"; 4.Type in the file name: CFScript5.Click Save ...Drag CFScript.txt into ComboFix.exeThen post the results log using Copy / PasteAlso please describe how your computer behaves at the moment. Link to post Share on other sites More sharing options...
dhrock Posted December 3, 2010 Author ID:355350 Share Posted December 3, 2010 Computer still bluescreened so I'm on safemode. ComboFix 10-12-01.01 - standrews 12/02/2010 17:47:41.6.2 - x86 NETWORKMicrosoft Link to post Share on other sites More sharing options...
LDTate Posted December 3, 2010 ID:355352 Share Posted December 3, 2010 Go head and try to run combofix again Link to post Share on other sites More sharing options...
dhrock Posted December 3, 2010 Author ID:355353 Share Posted December 3, 2010 Using the same script or regular? Link to post Share on other sites More sharing options...
LDTate Posted December 3, 2010 ID:355354 Share Posted December 3, 2010 Regular scan Link to post Share on other sites More sharing options...
dhrock Posted December 3, 2010 Author ID:355359 Share Posted December 3, 2010 I updated combofix and now it won't run. The bar appears and loads but the blue screen never appears. Link to post Share on other sites More sharing options...
LDTate Posted December 3, 2010 ID:355362 Share Posted December 3, 2010 It can take up to 30 minutes to finish so give it some time Link to post Share on other sites More sharing options...
LDTate Posted December 3, 2010 ID:355364 Share Posted December 3, 2010 You should see a black window open with a little flashing cursor or look at the hard drive light and see if it's flashing Link to post Share on other sites More sharing options...
LDTate Posted December 3, 2010 ID:355372 Share Posted December 3, 2010 Anything indicating it's running? Link to post Share on other sites More sharing options...
dhrock Posted December 3, 2010 Author ID:355379 Share Posted December 3, 2010 Nope. Link to post Share on other sites More sharing options...
LDTate Posted December 3, 2010 ID:355384 Share Posted December 3, 2010 I guess we should have tried to deal with the issue that it won't boot in normal mode first.Do you have your Windows CD? Link to post Share on other sites More sharing options...
dhrock Posted December 3, 2010 Author ID:355387 Share Posted December 3, 2010 Unfortunately I don't have it. Link to post Share on other sites More sharing options...
LDTate Posted December 3, 2010 ID:355390 Share Posted December 3, 2010 You need to come up with one. Even if we remove the infections, you'll still need the cd to fix the boot issues.Maybe you can find a friend that is using the same OS version you're using.You could also contact Microsoft or the manufactor or the store you bought it from. Link to post Share on other sites More sharing options...
dhrock Posted December 3, 2010 Author ID:355402 Share Posted December 3, 2010 So I just need a windows vista cd, no cd key? Link to post Share on other sites More sharing options...
LDTate Posted December 3, 2010 ID:355404 Share Posted December 3, 2010 We should just need the cd. It does need to be a OS CD and not just a OEM restore cd that only lets you restore the pc to when it was purchased.Just a little hint.In the future if you ever buy a computer, make sure you get a real Windows OS cd/dvd and not just the OEM cd that the manufactor pre-installs.All you can do with the OEM is re-install back to when they installed everything.For the life of me I still don't know why MS allows that, but I guess it's all about the money. Link to post Share on other sites More sharing options...
dhrock Posted December 3, 2010 Author ID:355405 Share Posted December 3, 2010 I can probably get a cd tomorrow but definitely this weekend.Will my programs/settings be erased once we fix the boot issues? Link to post Share on other sites More sharing options...
LDTate Posted December 3, 2010 ID:355407 Share Posted December 3, 2010 All we want to do is boot the system with using the cd and fix the Master Boot Record.This is how it will go:To Restore Vista MBR, please use the following simple solution.1. Start your computer from the Windows Vista Installation DVD2. Press a key when prompted to continue3. Choose your language, time, keyboard and click Next:Select language and preferences4. Next, click "Repair your Computer":Repair your computer5. Now, from the System Recovery Options dialog, select the "Operating System" you want to repair, then click Next:System recovery options, choosing your Operating system6. From the "Choose a Recovery Tool" dialog menu, select "Command Prompt":Recovery Tool Command Prompt7. Type the following into the "Command Prompt Window":bootrec.exe /fixmbrbootrec.exe /fixboot8. Remove the Vista Installation DVD and restart your PC. Link to post Share on other sites More sharing options...
dhrock Posted December 3, 2010 Author ID:355411 Share Posted December 3, 2010 Okay then. I'll post back once I gain access to a cd. Link to post Share on other sites More sharing options...
LDTate Posted December 3, 2010 ID:355415 Share Posted December 3, 2010 We'll work on it then. Link to post Share on other sites More sharing options...
dhrock Posted December 4, 2010 Author ID:355878 Share Posted December 4, 2010 Okay. I now have a windows vista business re-installation dvd. Link to post Share on other sites More sharing options...
Recommended Posts