Virus on laptop. Help would be much appreciated

adouglasmhor

Big_Ed wrote: »

To be honest you can't really trust the system integrity now, especially if you do stuff like online banking. Formatting and reinstalling Windows is the safest option.

Absolute tosh.

waddler_8

ayeshasi wrote: »

Thanks here u go

Next step. It should only take a minute or so.

Download aswMBR and save it to your Desktop.

http://public.avast.com/~gmerek/aswMBR.exe

• Right click aswMBR.exe & choose "Run as Administrator" to run it.
• Click NO to the prompt to download Avast virus definitions
• Click the Scan button.
• Wait till the scan reports "Scan finished successfully"
• Click Save log & save the log to your desktop.
• Click OK
• Two files will be created, aswMBR.txt & a file named MBR.dat
• Click EXIT.
• Copy & Paste the contents of aswMBR.txt into your next reply.

Don't click to fix anything yet, just post the log

ayeshasi

Here it is.P.s sorry for late replies. Got a baby to attend to LOL

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-30 21:36:10

---

21:36:10.585 OS Version: Windows x64 6.1.7601 Service Pack 1
21:36:10.585 Number of processors: 4 586 0x2502
21:36:10.585 ComputerName: ASH-VAIO UserName: Ash
21:36:14.648 Initialize success
21:36:26.781 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
21:36:26.797 Disk 0 Vendor: TOSHIBA_ GJ00 Size: 305245MB BusType: 3
21:36:26.797 Disk 1 \Device\Harddisk1\DR1 -> \Device\0000006d
21:36:26.797 Disk 1 Vendor: RICOH 02 Size: 305245MB BusType: 0
21:36:26.812 Disk 2 \Device\Harddisk2\DR2 -> \Device\0000006e
21:36:26.812 Disk 2 Vendor: RICOH 02 Size: 305245MB BusType: 0
21:36:26.843 Disk 0 MBR read successfully
21:36:26.843 Disk 0 MBR scan
21:36:26.843 Disk 0 Windows 7 default MBR code
21:36:26.875 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 10594 MB offset 2048
21:36:26.890 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 21698560
21:36:26.906 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 294549 MB offset 21903360
21:36:26.937 Disk 0 scanning C:\Windows\system32\drivers
21:36:36.447 Service scanning
21:37:37.558 Modules scanning
21:37:37.574 Disk 0 trace - called modules:
21:37:37.605 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys iaStor.sys hal.dll
21:37:37.620 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004fa7060]
21:37:37.636 3 CLASSPNP.SYS[fffff8800185143f] -> nt!IofCallDriver -> [0xfffffa8002f7db20]
21:37:37.636 5 ACPI.sys[fffff88000f7e7a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8002f83050]
21:37:37.652 Scan finished successfully
21:38:05.905 Disk 0 MBR has been saved successfully to "C:\Users\Ash\Desktop\MBR.dat"
21:38:05.921 The log file has been saved successfully to "C:\Users\Ash\Desktop\aswMBR.txt"

waddler_8

Here it is.P.s sorry for late replies. Got a baby to attend to LOL

No worries.

They look ok.

Post the contents of the other log from DDS - attach.txt

ayeshasi

The other one is MBR.dat and unable to open this file

waddler_8

No, not aswMBR.

The first bit of software you ran - DDS - produced two logs; DDS.txt which you've posted & there should be a second file - attach.txt

ayeshasi

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 22/04/2010 16:08:35
System Uptime: 30/08/2012 04:45:50 (5 hours ago)
.
Motherboard: Sony Corporation | | VAIO
Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz | N/A | 1194/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 288 GiB total, 144.033 GiB free.
is Removable
E: is Removable
F: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft Virtual WiFi Miniport Adapter
Device ID: {5D624F94-8850-40C3-A3FA-A4FD2080BAF3}\VWIFIMP\5&108D72A9&0&01
Manufacturer: Microsoft
Name: Microsoft Virtual WiFi Miniport Adapter
PNP Device ID: {5D624F94-8850-40C3-A3FA-A4FD2080BAF3}\VWIFIMP\5&108D72A9&0&01
Service: vwifimp
.
==== System Restore Points ===================
.
RP544: 15/07/2012 20:20:08 - Windows Backup
RP545: 18/07/2012 10:34:10 - Windows Update
RP546: 22/07/2012 23:57:08 - Windows Backup
RP547: 26/07/2012 00:01:53 - Windows Update
RP548: 29/07/2012 22:36:11 - Windows Backup
RP549: 31/07/2012 23:21:20 - Windows Update
RP550: 04/08/2012 12:04:39 - Windows Update
RP551: 06/08/2012 00:29:02 - Windows Backup
RP552: 07/08/2012 13:20:54 - Windows Update
RP553: 13/08/2012 13:18:56 - Windows Backup
RP554: 14/08/2012 22:51:22 - Windows Update
RP555: 15/08/2012 23:01:09 - Windows Update
RP556: 21/08/2012 10:14:50 - Windows Backup
RP557: 21/08/2012 17:57:29 - Windows Update
RP558: 26/08/2012 21:11:26 - Windows Backup
RP559: 28/08/2012 09:33:05 - Restore Operation
RP560: 28/08/2012 09:44:47 - Windows Update
.
==== Installed Programs ======================
.
.
ABBYY FineReader 6.0 Sprint
Adobe Flash Player 10 Plugin
Adobe Flash Player 11 ActiveX
Adobe Reader 9.4.6
ALDI Print Software
Apple Application Support
Apple Software Update
ArcSoft Magic-i Visual Effects 2
ArcSoft PhotoImpression 4
ArcSoft WebCam Companion 3
Avira Free Antivirus
BBSAK
BlackBerry App World Browser Plugin
BlackBerry Desktop Software 6.1
BlackBerry Device Software Updater
BlackBerry Theme Studio 5.0
BlackBerry Theme Studio 6.0
Compatibility Pack for the 2007 Office system
Coupon Printer
D3DX10
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Digimax i5
Digimax Viewer 2.1
Dropbox
DVD Shrink 3.2
DVDFab 7.0.4.0 (15/04/2010)
DVDFab 8.0.7.3 (29/01/2011)
Epson Easy Photo Print 2
Epson Event Manager
Epson Printer Software Downloader
EPSON Scan
Epson Stylus SX510W_TX550W Manual
EpsonNet Print
EpsonNet Setup
Evernote
Express Burn
Express Rip
FoxTab Video Converter
Google Chrome
Google Toolbar for Internet Explorer
Google Update Helper
HiJackThis
Intel(R) Control Center
Intel(R) Graphics Media Accelerator Driver
Intel(R) Management Engine Components
Intel(R) Rapid Storage Technology
Java Auto Updater
Java(TM) 6 Update 26
Junk Mail filter update
Malwarebytes' Anti-Malware version 1.51.0.1200
Media Gallery
Mesh Runtime
Messenger Companion
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office Groove MUI (English) 2010
Microsoft Office InfoPath MUI (English) 2010
Microsoft Office Live Add-in 1.5
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Professional Plus 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Suite Activation Assistant
Microsoft Office Word MUI (English) 2010
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft SQL Server Compact 3.5 SP1 English
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Works
MSVCRT
MSVCRT_amd64
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MusicStation
Norton Online Backup
Plazmic CDK 4.7 for BlackBerry
PMB
PMB VAIO Edition Guide
PMB VAIO Edition plug-in (Click to Disc)
PMB VAIO Edition plug-in (VAIO Image Optimizer)
PMB VAIO Edition plug-in (VAIO Movie Story)
Prism Video Converter
Quick Web Access
QuickTime
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealPlayer
Realtek High Definition Audio Driver
RealUpgrade 1.1
Roxio Central Audio
Roxio Central Copy
Roxio Central Core
Roxio Central Data
Roxio Central Tools
Roxio Easy Media Creator 10 LJ
Safari
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Serif FontManager X3
Serif PagePlus X3
Serif PagePlus X3 Resources
Setting Utility Series
Skype Toolbars
Skype™ 5.8
SOHLib Merge Module
Sony Home Network Library
Sony Picture Utility
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553092)
VAIO - PMB VAIO Edition Guide
VAIO - PMB VAIO Edition plug-in (VAIO Image Optimizer)
VAIO Care
VAIO Content Metadata Intelligent Analyzing Manager
VAIO Content Monitoring Settings
VAIO Control Center
VAIO Data Restore Tool
VAIO DVD Menu Data
VAIO Entertainment Platform
VAIO Event Service
VAIO Gate
VAIO Gate Default
VAIO Hardware Diagnostics
VAIO Marketing Tools
VAIO Media plus
VAIO Media plus Opening Movie
VAIO Movie Story Template Data
VAIO Original Function Settings
VAIO Power Management
VAIO Premium Partners
VAIO screensaver
VAIO Smart Network
VAIO Transfer Support
VAIO Update
VAIO Wallpaper Contents
VideoPad Video Editor
VU5x86
WavePad Sound Editor
Windows Live Communications Platform
Windows Live Essentials
Windows Live Installer
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live Messenger Companion Core
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
WinRAR 4.00 (32-bit)
WriteExpress Rhymer and Phonetic Finder
.
==== Event Viewer Messages From Past Week ========
.
28/08/2012 09:40:00, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: SABKUTIL
28/08/2012 09:29:12, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Intel(R) Rapid Storage Technology service to connect.
28/08/2012 09:29:12, Error: Service Control Manager [7000] - The Intel(R) Rapid Storage Technology service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
.
==== End Of File ===========================

waddler_8

That's the one.


Update this to version 9.5.2

Adobe Reader 9.4.6

Open Adobe Reader go to > Help > Check for updates Download the updates.

Reason: http://www.securelist.com/en/analysis/204792239/IT_Threat_Evolution_Q2_2012#10

Uninstall this:

Java(TM) 6 Update 26

Download Java SE 7 update 7 from here: http://www.java.com/en/download/index.jsp

Reason: http://blogs.technet.com/b/security/archive/2011/11/28/millions-of-java-exploit-attempts-the-importance-of-keeping-all-software-up-to-date.aspx

Uninstall this:

Malwarebytes' Anti-Malware version 1.51.0.1200

Download & install the latest version, run a quick scan (uncheck the offer of the PRO trial when installing).

http://helpdesk.malwarebytes.org/entries/20839693-where-can-i-download-the-latest-version-of-malwarebytes-anti-malware
http://helpdesk.malwarebytes.org/entries/20840058-how-do-i-install-malwarebytes-anti-malware
http://helpdesk.malwarebytes.org/entries/20863072-how-to-run-a-quick-scan

Post the log.

ayeshasi

When im trying to update adobe it says 'to update adobe reader, you need administrator priviledges on this machine'....

waddler_8

Right click the Adobe Reader Icon and choose "Run as Administrator"