Cleaned up the Windows Recovery virus - (I think)

[Asisweet]

I think I managed to clean up the Windows Recovery virus on my Win 7 Home 32bit OS.

I followed the instructions from http://www.bleepingc...indows-recovery and I am still having issues:

- no screen saver

- browser redirection to Shopzilla

- scrit errors

- all of my program folders in All Programs are empty. I can go to DOS and see some of the exe files, but who can remember all of those.

I did something right because my webroot ran but I could not quarantine the files. YIKES.

I posted this before to the wrong forum and was given the instructions to follow from a link titled: I'm infected - What do I do now?

I downloaded dds.scr and it has been running for 30minutes and no log files have opened anywhere but I can see something is processing. Is this normal?

PLEASE HELP!!!!

[LDTate]

Logs will be closed if you haven't replied within 3 days

Please don't attach the scans / logs for these tools, use "copy/paste".

DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.

Vista and Windows 7 users:

1. These tools MUST be run from the executable. (.exe) every time you run them

2. With Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

I suggest you do this:

Please download RogueKiller.exe and save it to your desktop.

• Now quit all running programs.
  
• Double click RogueKiller.exe to run it.
  
• When prompted, type 1 and hit Enter.
  
• A RKreport.txt should appear on your desktop.
  
• Note: If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe .
  
• Please post the contents of the RKreport.txt in your next Reply.

[LDTate]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!