Solved Do I have the w32 Blaster?

[Jacee]

After your night's sleep, please go back to my bat.file and follow the instructions.
Then go back and download TFC and follow my instructions from there.

 

[cottonball]

The ESET ServicesRepair download site is working OK at this end.
Try these alternate sites:
http://kb.eset.com/library/ESET/KB%20Team%20Only/Malware/ServicesRepair.exe
http://www.forospyware.com/attachments/forum16/3546d1345593669-servicesrepair.exe

Regarding Post #118...
How to get to the C:\Windows\System32\Drivers\etc folder

When you download the HOSTS file, select: Save target as...
The Save As prompt appears.

In the Save As prompt, on the left column, scroll down to: Computer
Under Computer, you should see the C drive. (It may have a name preceeding the C drive)

Click the > to the left of C: to expand it.
You will now see the Windows folder under C:

Click the > to the left of the Windows folder to expand it.
You will now see the System32 folder under Windows

Click the > to the left of the System32 folder to expand it
You will now see the Drivers folder under System32

Click the > to the left of the Drivers folder to expand it
You will now see the etc folder <<---this is where the downloaded file goes

Still in the Save As prompt, press the Save button. That should do it.

 

[cottonball]

@Layback Bear,

I did notice this in post #111

ATTENTION!=====> C:\Program Files\Windows Defender\MpSvc.dll IS INFECTED AND SHOULD BE REPLACED.

I'm aware of that, and hoping the ESET ServicesRepair Utility will take care of that, and all sorts of other services that have problems.

Will just have to wait and see. The OP has a plate full of instructions right now.
He has to go one step at a time. This stuff can give you shell-shock. :shock:

 

[Prescottbob]

Good morning troops!

I downloaded ESET via Chrome and it's setting in "downloads" ready to go.

I have to use Chrome for all these downloads since IE gives that VIRUS DETECTED message.

Now! When I download the HOSTS file in Chrome it goes directly to "downloads" without giving me a "Save as" option.

 

[Prescottbob]

Jacee,

I, got the BAT in notepad but the left side of it's screen is under the computer screen and I can't get to the left of VIEW to save it. ????

 

[cottonball]

Prescottbob,

For that hosts file that is in the Downloads folder...

Let's see if the following moves the hosts file to where it belongs, in the etc folder...
(C:\Windows\System32\drivers\etc)

Go to Start > Search programs and files, and type in: cmd
Click cmd to open

At the Command Prompt, type in (or copy/paste with the mouse) the following commands, one at a time, and press Enter after each:

cd \
mv C:\Users\Binnie\Downloads\hosts C:\Windows\System32\drivers\etc

Now, to check the contents of the etc folder, type in (or copy/paste) the following command, and press Enter:

dir C:\Windows\System32\drivers\etc

Post the results obtained by pressing the black icon on the upper left of the Command Prompt, and choose: Select all
Back at the black icon, select: Copy

Copy the results to Notepad, or copy them straight to your reply.

 

[Prescottbob]

It tells me "mv" is not an internal or external command

 

[cottonball]

Try:

cd \
move C:\Users\Binnie\Downloads\hosts C:\Windows\System32\drivers\etc

 

[Prescottbob]

says access denied

 

[Prescottbob]

hold it ---I didn't do the cd \ first

 

[Prescottbob]

or should I ?

 

[Prescottbob]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Binnie>cd/
C:\>mv C:\users\Binnie\Downloads\hosts C:Windows\System32\drivers\etc
'mv' is not recognized as an internal or external command,
operable program or batch file.
C:\>move C:\Users\Binnie\Downloads\hosts C:\Windows\System32\drivers\etc
Access is denied.
0 file(s) moved.
C:\>

 

[cottonball]

Go to Start > Search programs and files, and type in: cmd

Right-click the cmd and select: Run as Administrator

At the Command Prompt, type in (or copy/paste with the mouse) the following commands, one at a time, and press Enter after each:

cd \
move C:\Users\Binnie\Downloads\hosts C:\Windows\System32\drivers\etc

 

[Prescottbob]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Binnie>cd/
C:\>mv C:\users\Binnie\Downloads\hosts C:Windows\System32\drivers\etc
'mv' is not recognized as an internal or external command,
operable program or batch file.
C:\>move C:\Users\Binnie\Downloads\hosts C:\Windows\System32\drivers\etc
Access is denied.
0 file(s) moved.
C:\>

 

[Prescottbob]

disregard # 134. I messed up the paste. It did say it moved 1 file.

 

[Prescottbob]

It's no longer in the "downloads"

 

[cottonball]

Check the contents of the etc folder.
Type in (or copy/paste) the following command, and press Enter:

dir C:\Windows\System32\drivers\etc

Please post the results obtained.

 

[Prescottbob]

no result found

 

[Prescottbob]

BTW, I finally maximized notepad to get JAYCEE's flush.bat to the desktop. I did run it by accident but not as ADMIN so I should do it again? Post# 95

 

[cottonball]

Hmmmm...where did it go?

At the Command Prompt
At C:\Users\Binnie>

You copy/pasted: dir C:\Windows\System32\drivers\etc

It found nothing in the etc folder??

Did you perform all the actions in Post #114?


In any event, please go to Post #95 from Jacee, as well as her Post #112.

When you get done with those, the go to Post #117 and use the ESET ServicesRepair Utility.

Then run the Farbar Service Scanner the same as before, and post the new FSS.txt in your reply.