Removal of virus has blocked internet. PLEASE PLEASE HELP

Page 10 of 12 FirstFirst ... 89101112 LastLast

  1. Posts : 70
    Windows 7 Home Premium 64
    Thread Starter
       #91

    Here is the latest SysLook report.
    Removal of virus has blocked internet. PLEASE PLEASE HELP Attached Files
      My Computer


  2. Posts : 2,470
    Windows 7 Home Premium
       #92

    Let's give this a whirl...

    Please open Notepad and paste the following text to it:

    Code:
    [HKEY_LOCAL_MACHINE\SOFTWARE\Dyn\Installed]
    "PureLeads"=-
    [-HKEY_LOCAL_MACHINE\SOFTWARE\PureLeads]
    In Notepad, click File > Save as...
    Save the file to the Desktop
    File name: PLfix2.reg
    Make sure the Save as Type field says: All Files
    Next, please go to the Desktop and double-click on PLfix2.reg
    Click Yes to merge it in the Registry.

    Now, please go back to Control Panel > Folder Options
    Select: Show hidden files, folders, and drives
    Uncheck: Hide protected operating system files

    Please search for and remove the following folder:
    C:\Program Files (x86)\PureLead

    The following files:
    C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\plsapp64.lnk

    ...and let's see if we can remove this one:
    C:\System Volume Information\SystemRestore\FRStaging\Windows\System32\plsapp64.dll

    But, you need to open a Command Prompt as Administrator

    At the Command Prompt:
    Type: CD \

    At the C:\ prompt, copy/paste with mouse:
    takeown /f "C:\System Volume Information\SystemRestore\FRStaging\Windows\System32\plsapp64.dll"

    Now, run the cacls command to give yourself full control rights to the file:
    cacls "C:\System Volume Information\SystemRestore\FRStaging\Windows\System32\plsapp64.dll" /G user:F

    The last part of the command needs the user name. I think in your case it is user??

    When done, use SystemLook once gain, and provide the results.
      My Computer


  3. Posts : 70
    Windows 7 Home Premium 64
    Thread Starter
       #93

    When I tried to merge, this is what popped up.
    Attached Thumbnails Attached Thumbnails Removal of virus has blocked internet. PLEASE PLEASE HELP-plfixnotify.png  
      My Computer


  4. Posts : 70
    Windows 7 Home Premium 64
    Thread Starter
       #94

    The only one of those files I could find was the last one. The other ones were not able to be located by Windows or manually.
    Attached Thumbnails Attached Thumbnails Removal of virus has blocked internet. PLEASE PLEASE HELP-cmdfinish.png  
      My Computer


  5. Posts : 70
    Windows 7 Home Premium 64
    Thread Starter
       #95

    Image of file directory and latest syslook results.
    Attached Thumbnails Attached Thumbnails Removal of virus has blocked internet. PLEASE PLEASE HELP-dirpic.png  
      My Computer


  6. Posts : 2,470
    Windows 7 Home Premium
       #96

    Oooops!!

    Code:
    REGEDIT4
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Dyn\Installed]
    "PureLeads"=-
    [-HKEY_LOCAL_MACHINE\SOFTWARE\PureLeads]
    Brains are dense today! Sorry for the goof!!


    The only one of those files I could find was the last one.
    Which file did you find and remove?

    Please use SystemLook once again, after doing the Registry merge above.

    Thanks!
      My Computer


  7. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #97

    @ ChronicX, we see you have run Combofix..... can you find and post the log from
    C:\Qoobox combofix.txt? please. Just copy and paste it in your next reply.
      My Computer


  8. Posts : 70
    Windows 7 Home Premium 64
    Thread Starter
       #98

    Hey, Cotton, sorry for the silence, real life always gets in the way. I will run the tests now. The image is of the path of the file I thought I'd deleted but as you can see it is still there. I manually deleted it but it's a sticky one apparently. The other files just were flat not located. Hope you are having a great day!
    Attached Thumbnails Attached Thumbnails Removal of virus has blocked internet. PLEASE PLEASE HELP-dirimage.png  
      My Computer


  9. Posts : 70
    Windows 7 Home Premium 64
    Thread Starter
       #99

    Latest Combofix report.
    Removal of virus has blocked internet. PLEASE PLEASE HELP Attached Files
      My Computer


  10. Posts : 2,470
    Windows 7 Home Premium
       #100

    Hello, CX!

    Heading for a Doctor's appt. and a few other things in a few minutes, so, will get back here later.

    Please post some new results for SystemLook when you are done.

    Please, do copy and paste them right on this thread, vs. attaching the results. Will be using my tablet while waiting, and it is easier to just look at the results on the tablet.

    Thanks!
      My Computer


 
Page 10 of 12 FirstFirst ... 89101112 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 02:04.
Find Us