how-to block ads
|
TheJoker
Premium,VIP,MVM
join:2001-04-26
Alexandria, VA
| reply to yazdzik
Re: without explorere.exe
quote:
I have both sdfix and mbam installers on the desktop, can apparently run the executable via task manager yet nothing installs.
Did the MBAM install program run successfully and install the program and it just won't run (is the folder C:\Program Files\Malwarebytes' Anti-Malware there?), or did it not even install?
There was a reason I said:
quote:
don't use a USB/Flash drive, it can spread infection
You need to quarantine that flash drive and not use it in any other computer at the moment, or you risk infecting any system you insert it into.
If MBAM didn't install, rename the installer program to a random name of your choosing and see if it will install. once installed, go to C:\Program Files\Malwarebytes' Anti-Malware and rename mbam.exe to a random name, and see if it will run. If it will, please follow the previous instructions on it's use.
If none of that works, try installing MBAM in Safe mode.
Download Bill Castner's FixPolicies.exe, a self-extracting ZIP archive, to your Desktop from here:
- Double-click FixPolicies.exe.
- Click the "Install" button on the bottom toolbar of the box that will open.
- The program will create a new Folder called FixPolicies.
- Double-click to Open the new Folder, and then double-click the file within: Fix_Policies.cmd.
- A black box will briefly appear and then close.
Download ComboFix© by sUBs from one of these locations:
* IMPORTANT !!! Save ComboFix.exe to your Desktop
Familiarize yourself with ComboFix before running it:
»www.bleepingcomputer.com/combofi···combofix
- Disable your AntiVirus and any AntiSpyware programs you may be running (usually via a right click on the System Tray icon) to prevent them from interfering.
- Double click on ComboFix.exe & follow the prompts.
- As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
- Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.
Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
Click on Yes, to continue scanning for malware. When finished, it will save a log.
Please include the contents of the log at C:\ComboFix.txt in your next reply.
Please post a new HijackThis log, the log from ComboFix (combofix.txt), and note any errors encountered.
--
Proud ASAP member since 2005 | |
yazdzik
Premium,MVM
join:2000-07-26
Honesdale, PA
 ·New York Connect
 ·Verizon Online DSL
| Dear Joker,
Renaming the files worked, at which point, editing the registry, which is a task I loathe, to point to the explorer.exe where it really is finished the job.
There is no way to say thank you that is not a understatement. Now, if my son learnt his lesson, all will be well.
Superb job of helping the barely literate, and a model of kindness with your patience.
Sincerely,
Martin
--
Life is a series of return dates. There is but one final argument, its eloquence determines who we were, and whether who we were had meaning. | |
TheJoker
Premium,VIP,MVM
join:2001-04-26
Alexandria, VA
| There is still work to do though.
If you followed the last instructions, there will be a ComboFix log that you need to post, along with a new HijackThis log. There is likely still work to do based on the log, and after that is taken care of, ComboFix will need to be uninstalled.
--
Proud ASAP member since 2005 | |
yazdzik
Premium,MVM
join:2000-07-26
Honesdale, PA
·New York Connect
·Verizon Online DSL
| Thanks, Joker -
This is a little like giving wireless help in ATU -
Except I know that once the victim is connected, it will work for at least 24 hours. 
The worst part is, convincing anyone not to run as privileged user, particularly teens whose every visit to the web is fraught with "do you want to install xyz now?"
Will post hj log next time I visit NY, combo fix was not necessary, I think, since explorer.exe and everything else I tried now work.
I did install the console, though, as I do that on every windows pc I work on.
You are the best.
Regards,
Martin
--
Life is a series of return dates. There is but one final argument, its eloquence determines who we were, and whether who we were had meaning. | |
TheJoker
Premium,VIP,MVM
join:2001-04-26
Alexandria, VA | Hopefully that got it all then, but the ComboFix log would have been a better view. When you do go there, please let me know in advance so I have an idea when you will be posting.
--
Proud ASAP member since 2005 | |
-
|
