djreb Posted May 10, 2011 ID:427062 Share Posted May 10, 2011 I am having problems with my computer. I originally had the windows recovery malware and I was able to clean it off. Since then I have had script errors popping up all the time and I don't have any Icons on the desktop. The desktop can be seen in other places such as when I open explorer. I tried running dds but it locks up the computer. I did run defogger and disabled. Computer is running slow at this point.ark.zipmbam-log-2011-05-08 (18-31-17).txtmbam-log-2011-05-08 (19-34-06).txtmbam-log-2011-05-09 (07-08-16).txt Link to post Share on other sites More sharing options...
LDTate Posted May 10, 2011 ID:427217 Share Posted May 10, 2011 Logs will be closed if you haven't replied within 3 days Please don't attach the scans / logs for these tools, use "copy/paste".Download unhide.exe & save it to your windows folder: Right click on unhide.exe and select Run as administrator (In case you have Vista or Win7) RebootThis will unhide folders/files that were set to be hidden by the infection you had.Let me know if that solved your problem. Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427227 Share Posted May 10, 2011 I have run unhide and it did not make my icons on the desktop come back but it did bring back programs in the start menu. Link to post Share on other sites More sharing options...
LDTate Posted May 10, 2011 ID:427233 Share Posted May 10, 2011 Try these1. Click Start, and then click Control Panel. 2. Double-click Display, click the Desktop tab, and then click Customize Desktop. 3. Select Restore Defaults 1. Click Start, and then click Control Panel. 2. Double-click Display, click the Desktop tab, and then click Customize Desktop.then click the web tab, then under the web pages to display on your desktop if it has "security" you uncheck this and delete 1. Right-click the desktop.2. Point to Arrange Icons By.3. Click Show Desktop Icons. ""Open windows explorer (right click the Start button and click Explore)At the top of windows explorer, click tools, folder options, click the view tab Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427248 Share Posted May 10, 2011 I have done everything that you suggest except the right click on the desktop, point to arrange icons because nothing comes up when I right click. Nothing can be copied to desktop either. No icons have come back. Link to post Share on other sites More sharing options...
LDTate Posted May 10, 2011 ID:427249 Share Posted May 10, 2011 (edited) Launch Notepad (Start>All Programs>Accessories), and copy/paste all the Quoted REGEDIT below to it. Don't forget to include REGEDIT4.Save in: DesktopFile Name: fixme.regSave as Type: All filesClick: SaveREGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]"NoDesktop"=dword:00000000On the desktop, doubleclick fix.reg and allow it to run. Let it mergeReboot Also please describe how your computer behaves at the moment. Edited May 16, 2011 by LDTate corrected regfix Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427254 Share Posted May 10, 2011 Can I save it some where else and run it because I tried to save it to desktop but it doesn't appear there? Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427255 Share Posted May 10, 2011 I was able to open explorer and run it from there will reboot now. Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427257 Share Posted May 10, 2011 Icons are back. Computer seems to be running a bit slower than normal. So far no script errors have popped up. Link to post Share on other sites More sharing options...
LDTate Posted May 10, 2011 ID:427258 Share Posted May 10, 2011 First we need to rehide hidden / system files so they don't get deleted.To re-hide those files:[*]Click on My Computer from your desktop and from the menu click on Tools and then Folder Options.[*]Click on the View tab and under the Hidden Files and Folders section, choose the radio button that says Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427259 Share Posted May 10, 2011 Icons are back. Computer seems to be running a bit slower than normal. So far no script errors have popped up. Link to post Share on other sites More sharing options...
LDTate Posted May 10, 2011 ID:427261 Share Posted May 10, 2011 First we need to rehide hidden / system files so they don't get deleted.To re-hide those files:[*]Click on My Computer from your desktop and from the menu click on Tools and then Folder Options.[*]Click on the View tab and under the Hidden Files and Folders section, choose the radio button that says Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427270 Share Posted May 10, 2011 Malwarebytes' Anti-Malware 1.50.1.1100www.malwarebytes.orgDatabase version: 6547Windows 5.1.2600 Service Pack 3Internet Explorer 7.0.5730.115/10/2011 1:54:57 PMmbam-log-2011-05-10 (13-54-57).txtScan type: Quick scanObjects scanned: 181135Time elapsed: 5 minute(s), 41 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
LDTate Posted May 10, 2011 ID:427272 Share Posted May 10, 2011 Note: Close all browsers before running ATF Cleaner: IE, FireFox, etc.Please download ATF Cleaner by Atribune.Download - ATF Cleaner Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427280 Share Posted May 10, 2011 I ran ATF cleaner and i am now rebooting. Link to post Share on other sites More sharing options...
LDTate Posted May 10, 2011 ID:427281 Share Posted May 10, 2011 OK Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427287 Share Posted May 10, 2011 I now have this error message.Warning:unresponsive scriptScript: file:///C:/Program%20Files/Mozilla%20Firefox/modules/XPCOMUtils.jsm:165 Link to post Share on other sites More sharing options...
LDTate Posted May 10, 2011 ID:427288 Share Posted May 10, 2011 Go here and follow the instructions to clear your Java Cachehttp://www.java.com/en/download/help/plugin_cache.xml Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427289 Share Posted May 10, 2011 Ok java cache cleared. Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427294 Share Posted May 10, 2011 I am still getting Internet explorer script errors popping up also. Link to post Share on other sites More sharing options...
LDTate Posted May 10, 2011 ID:427305 Share Posted May 10, 2011 Vista and Windows 7 users:1. These tools MUST be run from the executable. (.exe) every time you run them 2. With Admin Rights (Right click, choose "Run as Administrator")Download ComboFix from one of these locations:Link 1Link 2 If using this link, Right Click and select Save As.* IMPORTANT !!! Save ComboFix.exe to your DesktopDisable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : Protective ProgramsDouble click on ComboFix.exe & follow the prompts.Notes: Combofix will run without the Recovery Console installed. Skip the Recovery Console part if you're running Vista or Windows 7. Note: If you have XP SP3, use the XP SP2 package.If Vista or Windows 7, skip the Recovery Console partAs part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:Click on Yes, to continue scanning for malware.When finished, it shall produce a log for you. Please include the C:\ComboFix.txt using Copy / Paste in your next reply.Notes:1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell your helper. 4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.Give it atleast 20-30 minutes to finish if needed.Please do not attach the scan results from Combofx. Use copy/paste.Also please describe how your computer behaves at the moment. Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427336 Share Posted May 10, 2011 combofix has been running for 40 minutes with just the cursor in the upper left corner. the pc it is running on appears to be somewhat frozen, the clock has stopped but it will kick into my screen saver what do you recommend Link to post Share on other sites More sharing options...
LDTate Posted May 10, 2011 ID:427339 Share Posted May 10, 2011 It appeasr to be hung.CF hangs.Kill with Taskmanager* Any process with cfexe file extensions* cfxxe* FindStr.exe* Regsvr32.exeAfter the above:Please download DDS by sUBs from one of the following links and save it to your desktop.DDS.scrDDS.pif[*]Disable any script blocking protection (How to Disable your Security Programs)[*]Double click DDS icon to run the tool (may take up to 3 minutes to run)[*]When done, DDS.txt will open. [*]After a few moments, attach.txt will open in a second window.[*]Save both reports to your desktop.---------------------------------------------------Post the contents of the DDS.txt in your next reply Link to post Share on other sites More sharing options...
djreb Posted May 10, 2011 Author ID:427361 Share Posted May 10, 2011 dds locks up my pc also Link to post Share on other sites More sharing options...
LDTate Posted May 10, 2011 ID:427362 Share Posted May 10, 2011 Never seen that happen before with DDS.Try restarting the computer Link to post Share on other sites More sharing options...
Recommended Posts