OMG 334 infected files found

toejumper

can only do this in normal mode, can`t get on the internet in safe mode, thanks steph

aliEnRIK

He asked to DOWNLOAD in normal mode and RUN in safe mode (Meaning you dont need to get on the net in safe mode as you already have it ready)

toejumper

sorry running this in normal mode, will that be ok, can i stop the scan and start again in safe mode, didn`t get a responce straight away so i didn`t want to leave it to long as last time i did this scan i took 5 hours to do
thanks steph

aliEnRIK

Carry on for me Steph
Im not entirely sure why Reluctant asked for you to run in safe mode

toejumper

phew thats alright then, thanks for all your patience, i bet your all shaking your head and pulling your hair out with me. :rotfl: :rotfl:

aliEnRIK

Reluctant might come in and bollock me for saying its ok though!

(looks around nervously )

toejumper

just treat me like a baby

toejumper

sorry its been a long time between post had navigation to web page canceled popping up, then tryed to reboot after doing Dr web, then couldnt log onto the interner after the reboot. anyway heres the log for Dr web scan.
thanks steph

c.bat;C:\32788R22FWJFW;Probably BATCH.Virus;Incurable.Moved.;
psexec.cfexe;C:\32788R22FWJFW;Program.PsExec.171;Incurable.Moved.;
setup.exe;C:\Program Files\AOL\Installers\ASP 2.0;Probably BACKDOOR.Trojan;Incurable.Moved.;
aspupdate\data017;C:\Program Files\Common Files\AOL\AOL Spyware Protection\Update\aspupdate;Probably BACKDOOR.Trojan;;
aspupdate;C:\Program Files\Common Files\AOL\AOL Spyware Protection\Update;Archive contains infected objects;Moved.;
A0149943.exe/Setup.EXE\data018;C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP677\A0149943.exe/Setup.EXE;Probably DLOADER.Trojan;;
\Setup.EXE;C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP677;Archive contains infected objects;;
A0149943.exe;C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP677;Archive contains infected objects;Moved.;
A0149944.exe;C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP677;Probably BACKDOOR.Trojan;Incurable.Moved.;
A0149945.exe;C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP677;Probably MULDROP.Trojan;Incurable.Moved.;
A0152232.bat;C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP678;Probably BATCH.Virus;Incurable.Moved.;
A0152307.bat;C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP678;Probably BATCH.Virus;Incurable.Moved.;
A0149946.exe;D:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP677;Probably BACKDOOR.Trojan;Incurable.Moved.;

~Chameleon~

I think the reason for asking you to do the scan in safe mode is to eliminate the risk of any virus/trojan affected programmes from running and either affecting results, or being unable to delete/quarantine due to files currently being in use!

At least that's the way I've always understood it and have always performed any diagnostic scans in safe mode for this reason.

aliEnRIK

This is probably going to be a no

But if you download Combofix again. RIGHT click ~ RENAME
Rename it as 'COMBO'
and run that?