Troubles with Permissions Changes Preventing access to anything.

At this stage, what are the remaining indicators of infection or other noteworthy problems?

Have permissions been properly restored? If no, explain remaining issues.

Does she really need Java installed on her system? If no, remove it.

Is backing up documents, wiping drive, and re-imaging an option? If yes, this is the best option as trust can no longer be guaranteed without known-good image. System key can be extracted from registry, prior to re-imaging.

shellcode,
Thanks for your response The reinstall worked so far I have already removed her java (she had 6 which is probably where all this came from) also saw that some one had downloaded Fonts and saw the word Conduit associated with that (Red flags) since I assume like XP fonts are loaded everytime Win7 boots. I am renstalling AVG PRo now and the 500 or so updates.

Sounds like you have it under control. I have found this tool useful for removing Conduit, in the past.

Remove Conduit Toolbar and search.conduit.com (Uninstall Guide)

Let me know if anything alarming pops up.

Lets take a look at the machine, and see what needs to be removed. :)

If there is conduit, there is likely other items that need to go.



Please download Junkware Removal Tool and save it on your desktop.

• Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log is saved to your desktop and will automatically open.
• Please attach the JRT log.

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on adwcleaner.exe to run the tool.
• Click on Scan button.
• When the scan has finished click on Clean button.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the contents of that logfile with your next reply.
• You can find the logfile at C:\AdwCleaner[S1].txt as well.

Download RSIT 64 bit or RSIT 32 bit Save it to your desktop.

CLICK HERE to determine whether you're running 32-bit or 64-bit for Windows.

Double-click RSIT.exe to start the tool. Windows Vista, 7 and 8 users Right Click & Run as Administrator .

• Then click " Continue "
• When the tool is finished, a notepad file called " Log "and "info" open
• Attach both of these to your reply.

Malnutrition,
I am unfamiliar with the programs you suggested how long have you been using them?
are there advantages over these programs

AVG
Malware Bytes
Combofix
Spybot Search and Destroy

Thank you for your response

I should follow up I have the OS working again struggling with (Curse work of your choice) .net 4 going off my experience from fixing xp I am fairly familiar with fixing these probelms using and old dot Net repair tool but windows 7 seems to be resisting
I used IObits Uninstaller to Power unistall all the dot net 4 updates and had to reinstall dot net 4 as it did not appear in the installed programs list typical install it to unistall it rebooted an gouple of times and reienstalled dot net 4 (I dont think I got the client dot net 4) tried to unistall full dot net and stated that I needed dot net 4 client installing that now then plan to Unistall all dot net 4 stuff updated the whole thing and reboot and let windoes update direct me. Hopefully it will fix

These tools will not harm your machine, I have been using them for a couple of years. :)

The first two will remove adware/spyware from your machine, the last will tell me what remains on your machine then we can remove what needs to be removed.

RSIT can make a detailed analysis of the computer system and generate elaborate reports regarding its efficiency, resource utilisation etc. After installation, first use of the RSIT generates two reports info.txt and log.txt. In subsequent runs, only the log.txt is generated. The log.txt report contains general information about the RSIT version, OS, hard disk, RAM etc. that can be used to identify causes for delays in the computer if any. The info.txt is generated during the first use right after the installation of the RSIT and consists of a list of software, security

Choice is yours I am here to help. :)

Also if you are using Spybot Search and Destroy I highly suggest that you remove it while I help you work on your machine. It can interfere with malware tools making our job harder, you may reinstall at the end of this venture, if you so choose.

Jacee,
Thanks for your reply
The output files are attached