virus log (cont'd)

aliEnRIK

Dont start a new thread ~ STAY ON THIS ONE

aliEnRIK

Vista guardian ~ never heard of it. Forget about it and simply follow the intructions ive given

debitcardmayhem

aliEnRIK wrote: »

Dont start a new thread ~ STAY ON THIS ONE

aliEnRIK wrote: »

Dont start a new thread ~ STAY ON THIS ONE

Too late sadly its here couldnt get there in time

aliEnRIK

Open notepad and copy/paste the text in RED below

File::
c:\windows\wweb32.dll
c:\programdata\Google\Google Toolbar\Update\gtb22EC.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbDB8.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbE06.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbC88D.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbFAE3.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbC855.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbD5C7.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtb36DA.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtb2646.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbB7AD.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtb345A.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbC775.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbC5A1.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtb4B15.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtb3708.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtb1CD4.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbC61D.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtb2740.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbDA2A.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtb31FA.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtb87E8.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtbE65A.tmp.exe
c:\programdata\Google\Google Toolbar\Update\gtb1890.tmp.exe

Save this as "CFScript" (FULL file will be 'CFScript.txt' EXACTLY as shown)

Then drag the CFScript into ComboFix.exe as you see in the screenshot below.




This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply

Combofix should never take more that 30 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.

gillbaby

Sorry, I'd already posted it in a new thread. Will repost here. Do you suggest I download an anti virus when I've done that? I was so frightened of being on the internet last night with the warning that kept on coming up. I thought of the Microsoft one or is there a better one? Will have to be a free one though!

gillbaby

I'm ready to give up!! I've been trying to open the ComboFix file without success - I've tried several routes. It either comes up that I can't rename the file combofix(1)! or it just does another scan, which just comes up the same as the first time I did it. Have you got a link that I could 'click' on please. Could you please help a desperate, nearly bald now, female?

aliEnRIK

Youll probably need to see hidden files ~
http://windows.microsoft.com/en-US/windows-vista/Show-hidden-files

Manually find and delete all the files

If you have problems with them going ~
Open malwarebytes
Goto MORE TOOLS
then RUN TOOL
and manually destroy them

gillbaby

Done everything you said, but where do I find the files? Nothing has appeared on screen and I don't know where to go next! Sorry.

aliEnRIK

Follow the links

So for example ~
c:\programdata\Google\Google Toolbar\Update\gtb1890.tmp.exe

The first part is 'C'
so youd go to C drive
Then the folder PROGRAM DATA
Then the folder GOOGLE and so on

gillbaby

I'm soooo sorry, I'm sat here in tears! I don't understand what you mean. You are trying so hard to help me and I'm so hopeless! I feel like a real dumb blonde!! This is awful as I think I could have understood better in Swahili!!lol