New
#271
Hello, i found the file on the C:\. And yes, i installed MSE last night. Tried downloading system lock from the link and it didnt work. i downloaded hitman pro as requested, and got a log file.
Hello, i found the file on the C:\. And yes, i installed MSE last night. Tried downloading system lock from the link and it didnt work. i downloaded hitman pro as requested, and got a log file.
Restore IE's default settings ... Internet Explorer - Reset
If you don't have CCleaner, download from here: Download CCleaner 4.01.4093 - FileHippo.com
Uncheck any prechecked bundled add-ons!
Check these items in IE and run the analyzer, when finished, click 'run cleaner'.
Next, click on the applications tab, check these items in Firefox and Chrome (if showing) Analyze and run cleaner.
Wouldn't it be something if one of these scans solved the problem?
Will give this up and take up planting various kinds of tomatoes.
Did that one year, and the squirrels ate them all!! The tomatoes were fenced in!!
Please try the following to activate the real Administrator on this computer:
Go to the Command Prompt, right-click and select: Run as Administrator
Once at the Command Prompt type or copy/paste the following, and press Enter:
Net user administrator /active:yes
The Command Prompt tells you whether the command was processed successfully.
Now, log off by going to Start, pressing the arrow to the right of Shutdown, and select: Log off
When the computer boots back up, press the Administrator account.
Find and click the Internet Explorer icon.
You get a notice with 3 choices, one of which is: To continue browsing click Home, etc.
Go to the upper right of IE, and click on the small house icon. If you place the mouse cursor over it tells you what it is.
At whatever webpage you get, you will see a notice at the bottom: The current security settings put your computer at risk.
Please ignore the notice.
Try to download SystemLook:
http://jpshortstuff.247Fixes.com/SystemLook_x64.exe
Does it download, or still the same? Press on with the following before posting here...
Go back to Start, press the arrow to the right of Shutdown, and select: Log off
Once back at your normal Desktop, go back to the Command Prompt, right-click and select: Run as Administrator
At the Command Prompt, type or copy/paste the following, and press Enter:
Net user administrator /active:no
Make sure you see the command was processed successfully message.
Please post back on whether the download got through, or still the same.
GilV37
The HITMANPro log wasn't displaying correctly on my iPad . Did it locate anything ?
Question : Do you Corel's Word Profect ?
Jacee! I ran that and unfortunately it didn't work.
Cottonball! I was able to download that file as administrator, but have not tried under the other account.
VistaKing! I don't have Word Perfect on this machine.
You did get out of the real Administrator account, and are now on your normal Desktop, right?
Will have to do some more checking...
GilV37
Do you see this file mstsc.exe inside the C:\ drive ? If you do can you upload that file to www.virustotal.com
I noticed that file on your FRST.txt log on page 1 .
I uploaded mstsc.exe and it came back saying that it was already analyzed on 5/9. Reanalyzed again and its fine. I got a 1 on the green angel, and a zero on the devil. GREAT PHOTOS.
Can you upload the link with the results ?
I don't think that file should be inside the C:\ drive but inside C:\Windows\System32 .
You don't use Remote Desktop Connection
Can you run another scan with FRST . Delete the old FRST exe file and the log files ? I apologize . I am just trying to see what is on the PC after all the stuff we had you run . I do remember seeing TeamViewer in the C:\ drive as well . Do you have TeamViewer installed ?
Warning
You will need a USB FLASH DRIVE
TipDownload the Tool from a non infected PC
Download Farbar Recovery Scan Tool
32-bit Version OS Farbar Recovery Scan Tool
64-Bit Version OS Farbar Recovery Scan Tool x64
NoteClick the button and right-click Computer .Select Properties .Look for System Type: which will say 32-bit Operating System or 64-bit Operating System
Plug the flash drive into the infected PC.
Enter System Recovery Options.
To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select the Repair your computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.
To enter System Recovery Options by using Windows installation disc:
Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.
On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
Select Command Prompt
In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
NoteReplace letter e with the drive letter of your flash drive.
TipType the commands below to see what your letter is for the USB drive and press ENTER after each command
The tool will start to run.Code:Diskpart List volume
When the tool opens click Yes to disclaimer.
Press Scan button.
FRST will let you know when the scan is complete and has written the FRST.txt to file
Please copy and paste both logs in your reply.(FRST.txt and Addition.txt)