UKASH Virus .....again :(

darrenj1471

If you're getting the same virus 3 times in a row . Might want to get a different Anti-virus software. A lot of people here use MSE

darrenj1471,

First of all, make sure the latest version of FRST64 in on the external drive, and that there are no other fixlist.txt files on it. Otherwise, this will not work.

Please do the following...
Open Notepad (Start > All Programs > Accessories > Notepad)

Copy/paste all the contents of the quote box below to Notepad (do not copy the word 'Quote').
Save it on the external drive as: fixlist.txt

start
HKU\darren\...\Winlogon: [Shell] explorer.exe,C:\Users\darren\AppData\Roaming\skype.dat [139264 2011-11-16] () <==== ATTENTION
C:\Users\darren\AppData\Roaming\skype.dat
C:\Users\darren\AppData\Roaming\skype.ini
C:\ProgramData\ezsidmv.dat
TDL4: custom:26000022 <===== ATTENTION!
SaveMbr: Drive=0
end

WARNING: This script is written specifically for darrenj1471, for use on this particular computer.
Running the script on another computer may cause damage to the Operating System!!

Run FRST again, but this time press the Fix button just once, and wait.

When done, the tool makes a log on the external drive. This time it is called: Fixlog.txt

Boot the computer into normal mode and post back on what happens.

Please post Fixlog.txt in your reply.

Also, an mbrdump.txt file is created on your external drive!
Please zip this file, and attach it to your reply.

Need to go out to get some chow. Will be back here later.

If the Desktop does not load, press the Windows key and the R key.
In the Open area of the Run box, type in: explorer.exe
Press: OK

or,

Press the keys: Ctrl Alt Del
Task Manager appears
Click the Applications tab, then click: New Task (at the bottom)
Type: explorer.exe
Click: OK

darrenj1471,

Glad you are back into Windows...no genious here.

Please stay low keyed in the use of the computer. Have to check the info from the Boot Configutation Data (BCD) to see what further action is needed.

Also, please do not run any other programs for now. Don't want you to return to square one again...

Thanks for your patience.

darrenj1471,

Please go to the 64-bit ListParts Download
Save to the USB drive.

Boot to the System Recovery Options as done before, and select: Command Prompt

Run ListParts by typing x:\listparts64 in the Command Prompt and pressing: Enter
(x - replace with the letter of the USB drive!)

When the tool opens click Yes to disclaimer.
Place a check on: List BCD
Press: Scan

When done, at the Command Prompt, type exit, and press: Enter

Back at the System Recovery Options, press: Restart

Let the computer boot normally and post in your reply the Result.txt that appears in the USB drive.

That's fine.

Will be in and out, but, will check every so often.

For time difference, are you in the USA, or in GB?

Also, will you check the USB drive and see if an Addition.txt file exists there.
It is produced by FRST when it is initially run.

If not produced, please use FRST64 as before, and check List.BCD and Addition.txt box under Optional Scans:


(Image courtesy of BleepingComputer.)

Then post the Addition.txt in you reply.

Need to find out what Partition Type there is.