Something has taken over my wife's computer

cottonball · 29 Aug 2013

jp1engr,

Running TDSSKiller was a smart move on your part! :)
A Boot sector virus can survive a new install.

Please proceed with the following to make sure there is not a RootKit to deal with:

Download the Farbar Recovery Scan Tool
Select the version that applies to the system.

Save to the Desktop.

Double-click the downloaded file to run it.
When the tool opens click Yes to disclaimer.
Press the Scan button.
FRST64 makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).

Please provide the FRST.txt in your reply.
The first time the tool is run, it also makes another log: Addition.txt

Also post the Addition.txt in your reply. It will present a list of the programs that are installed on your computer, and any undesirables can be identified.

jp1engr · 30 Aug 2013

Jacee,

As I said, I did the Kaspersky thing just to be informed. There are also the other reasons to wipe & reinstall, as I mentioned earlier. I was just wondering whether there had been progress at Kaspersky that Ms. Young didn't know about.

And thanks for the new link, too.

jp

jp1engr · 06 Sep 2013

All,

Got the system reinstalled. Now neither of the malware scanners find anything (I've only tried tdsskiller and Symantec). When I tried to burn the Darvik, I found I'd left only an old cdrom reader in my system (for some reason, neither of the modern r/w drives will boot). So I have to wait until I can get the system from her long enough to power down and install one of the writers.

I really haven't turned my back on you all

.

Actually, rereading Cottonball's last message just now, I see I can run it within the system. To work!

jp

jp1engr · 07 Sep 2013

So Cottonball,

Here are FRST.txt and Addition.txt. FRST.txt

Addition.txt

cottonball · 07 Sep 2013

Please download Temp File Cleaner (TFC):
TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums
Save to the Desktop

Double-click on TFC.exe to run the program.
Be sure to save any work in progress before running TFC!!

Click on Start to begin the cleaning process.
TFC closes all running programs, and may ask to restart the computer.
If so, please restart.

While we are at it, let’s check the system's Security status with the following...
Download Security Check:
http://screen317.spywareinfoforum.org/
Save to your Desktop.
Double-click: SecurityCheck.exe
Follow the onscreen instructions inside the black box.
When done, a Notepad report opens automatically, called: checkup.txt

Please post the checkup.txt in your reply.
(Please do not take any corrective actions!)