Dad has done it again - downloaded something that now stops his IE from loading!

Jo4

closed wrote: »

what is it doing.

It is showing the address bar and a white screen.

closed

address bar in IE?

Jo4

It has shown

Data s.eVar8=metaData/************* DO NOT ALTER ANYTHING BELOW THIS LINE! **************/ vars_code=s.t();if(s_code)document.write(s_code)//-->

Jo4

closed wrote: »

address bar in IE?

Yes, address bar in IE!

waddler_8

Malwarebytes won't fully remove ZeroAccess (Sirefef). The detection is a pointer that the infection is present.

I can help you remove it. What I'd need first is DDS log before we run tools to fix it.

Download DDS from the link below and save it to your desktop:

Link

After you've downloaded it and saved it to your desktop:

• Double click DDS to run it.
• When it's finished, DDS will open two logs:

1. DDS.txt
2. Attach.txt

Save both reports to your desktop.

Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)

GunJack

right, if mbam found zeroaccess, then you really need to run combofix. Download and SAVE to desktop.

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

scroll down to the download link - Download and SAVE to desktop.



You will need to turn off your antivirus real-time protection to run combofix, which you will need to do by right-click on it and Run As Admin.

If prompted, allow to install windows recovery environment. Once cf has finished, a log will pop up in Notepad. Post that log up here.


Also, ^^^^ Waddler got in first

waddler_8

Get a DDS log before running combofix.

Jo4

waddler_8 wrote: »

Malwarebytes won't fully remove ZeroAccess (Sirefef). The detection is a pointer that the infection is present.

I can help you remove it. What I'd need first is DDS log before we run tools to fix it.

Download DDS from the link below and save it to your desktop:

Link

After you've downloaded it and saved it to your desktop:

• Double click DDS to run it.
• When it's finished, DDS will open two logs:

1. DDS.txt
2. Attach.txt

Save both reports to your desktop.

Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)

It is supposed to be running!

Jo4

I have the results but I am logging into this site on his pc to post the results.

waddler_8

Ok, post DDS.txt