virus help please - poorly pc

HalfPint

ok..inside qoobox is folder backenv, folder quarantine, folder testc, lastrun folder, and test folder.

inside quarantine is folder c, folder registry backups and catchme text document.

hp x

HalfPint

---

2011-06-04 - 08:03:36

---

---

2011-06-04 - 09:08:46

---

hmm...is this right or is it cause I ran it twice...I thought the first time it failed..gulp?

HalfPint

yep..we have the original disc and the licence key

RussJK

HalfPint wrote: »

---

2011-06-04 - 08:03:36

---

2011-06-04 - 09:08:46

---

hmm...is this right or is it cause I ran it twice...I thought the first time it failed..gulp?

Yes basically, also the lastrun folder suggested that it had run twice. It just never had a chance to make the last log, as presumably it tried to delete something (possibly a nasty) that caused the computer to reboot.

I don't know the ins and outs of Combofix (strictly speaking, only the developers of it really do), so just want you to see anything that looks like a text file and paste it.

HalfPint

last run is empty and there is nothing else in quarantine except what I listed above.

HalfPint

found this is c/

aaw7boot log

Boot Cleaner
================================================================================
[~] Cleaning started at 2011-06-01 18:28
[~] Preparing to execute queued commands
[~] Deleting file: C:\Program Files\SGPSA\SearchAssistant.dll
[~] Deleting file: C:\Documents and Settings\Laura\My Documents\Downloads\everydayjigsaw.exe
[~] Finished processing queued commands


================================================================================
Boot Cleaner
================================================================================
[~] Cleaning started at 2011-06-03 07:46


================================================================================
Boot Cleaner
================================================================================
[~] Cleaning started at 2011-06-03 07:49


================================================================================
Boot Cleaner
================================================================================
[~] Cleaning started at 2011-06-03 16:19


================================================================================
Boot Cleaner
================================================================================
[~] Cleaning started at 2011-06-03 21:20
[~] Preparing to execute queued commands
[~] Deleting file: C:\Documents and Settings\Laura\Local Settings\Application Data\{CFF06FE8-0FBF-480F-A6CD-C357BCA9AF6A}\chrome\content\overlay.xul
[~] Deleting file: C:\Documents and Settings\Laura\My Documents\Downloads\Hunchback(2).rar
[~] Deleting file: C:\Documents and Settings\Laura\My Documents\Downloads\Hunchback.rar
[~] Deleting file: C:\System Volume Information\_restore{F16C8F30-1B3E-4907-B56E-E1EC161313C7}\RP1188\A0138531.dll
[~] Finished processing queued commands


================================================================================
Boot Cleaner
================================================================================
[~] Cleaning started at 2011-06-03 23:44


================================================================================
Boot Cleaner
================================================================================
[~] Cleaning started at 2011-06-04 00:20


================================================================================
Boot Cleaner
================================================================================
[~] Cleaning started at 2011-06-04 07:23


================================================================================
Boot Cleaner
================================================================================
[~] Cleaning started at 2011-06-04 08:22

HalfPint

gone through and made sure I can view the hidden files using the link..ta.

results the same.

everything was disabled when I ran it BUT when it rebooted, adaware restarted itself...avast is still off...adaware is on, as it has been since the reboot.

HalfPint

ok....avast back on now.

hubby fetching sledgehammer lol:rotfl:

Thanks again for this appreciate you giving us your valuable time.

Yes..I have the disc that came with the pc when we bought it...windows xp home edition, version 2002, inc service pack 2. I also have the licence key too.

HalfPint

ok, ta.

Will get on the laptop and do the rescue discs. I'll hopefully get the desktop fixed and then look at laptop...laptop is running vista.

gonna jump in the shower and then sort discs out....I owe you a few beers (or something else if your t-total)

HalfPint

ok...all important files have been backed up (I did most of them yesterday)

done both rescue discs as suggested.

Just a quick question before I put the disc(s) in...do I need to be in safe mode or shut things downs (adaware & avast etc) or can I just close all open windows and put it in?

sorry seems a daft question but I'm feeling a bit brain boggled now lol

HP x