New
#111
Attached is the FSS report. And when i went to download junction.zip, i got an error. I also attached that a screen shot in MS Word.
Attached is the FSS report. And when i went to download junction.zip, i got an error. I also attached that a screen shot in MS Word.
hello Cottonball. i Ran that file as requested, and the DOS screen is just hanging with a blinking cursor. Is this normal?
GilV37,
We are not done.
The infection you were initially confronted with also brought with it a new malware variant that affects Microsoft Security Essenials and/or Windows Defender. It creates symbolic links to their folders and files, which, in turn, affects path-name resolution. In plain English means "can't get there from here".
This infection is very recent, so we had no idea what it was, or, what was involved. Taking care of this variant of ZeroAccess should also restore the ability to download files.
For now, please do not engage in any other repairs, as they will not help matters.
Need to take a good look at the last report you provided which identifies symbolic links. There are quite a few of them, but, it appears that Microsoft Security Essentials is not involved.
More than likely, will not get back to you until tomorrow.
Thank you for your patience.
That is fine... I can not thank you enough for helping me out with this. what ever it takes i'll be patient. You, VistaKing, and Jacee are a life saver!!! :) you told me that you get paid by reps. Please tell me how to do that.
Thanks again!!!
We're dealing with a brand new infection, so, have to proceed cautiously.
Thank you for being so patient.
GilV37,
One more item, tonight, if possible.
Please remove the old copy of FRST64, the already used fixlist,txt, and the fixlist report from the Desktop. Then, download a new copy of the Farbar Recovery Scan Tool Download
Select the 64-bit version.
Save it to your Desktop.
Next, copy/paste all the text inside the quote box to Notepad (Do not copy the word 'Quote')
In Notepad, click File (at the top), and select: Save As...Unlock: C:\Program Files\Windows Defender
Folder: C:\Program Files\Windows Defender
In the Save as prompt, name the file fixlist.txt, and save it to the Desktop <<---Important!!
NOTE. It is important that FRST64 and the fixlist.txt are in the same location (Desktop) or this will not work.
Now, run FRST64 and press the Fix button, just once, and wait.
When done, the tool makes a log on the Desktop: Fixlog.txt
Please post the new Fixlog.txt in your reply.
GilV37,
Please press on with the previous post, but, only get a new copy of the Farbar Recovery Scan Tool Download
Disregard the rest, if you have not done the task, and do the following:
(If you have already done the above, then post the results. No problem.)
We need to scan the system with a special tool...
Please attach or copy/paste the log.txt your reply.
- Please download Junction v1.06: Junction
- Save it to the Desktop.
- Unzip it and place junction.exe in the Windows directory (C:\Windows). Do not run it.
- Open Notepad (Start > All Programs > Accessories > Notepad) and copy/paste the text in the code box to Notepad:
Code:@ECHO OFF dir /a/b c:\windows\junction.exe >c:\log.txt 2>&1 junction -s c:\>>c:\log.txt echo.End of Scan >>c:\log.txt notepad c:\log.txt- Go to the File menu at the top of the Notepad and select: Save As...
- Select Save in: Desktop
- Fill in File name: findjunction.bat
- Save as type: All file types (*.*)
- Click: Save
- Close Notepad.
- Locate findjunction.bat on the Desktop. It looks like this:
- Right-click and select: Run as Administrator
- The command prompt opens, and then Notepad opens.
i didnt do the first post. just the findjunction program.