Is someone sharing Windows 7 with me?

[nottaclue9]

I'll just let this RK scan run overnight then. It's moving really slowly.
Thanks for helping me, Vista King.

 

[VistaKing]

To take a PrntScrn of RogueKiller

Click on RogueKiller then Press ALT+PRNTSCRN.

Then paste in your reply . If that doesn't work . Open up Paint.exe by clicking on rb: type Paint inside Search programs and files and press <Enter> . Inside Paint click on Edit and choose Paste ( CTRL + V ) . Then save it and upload the file onto here .

   Note

PrntScrn key is after F12

 

[nottaclue9]

I no longer have the RK screen. It ran its "delete" scan overnight. I turned my computer off when I went to bed about 3. All I have now is the report from the third RK scan (the one that did not involve deleting anything). I think I've posted that.

 

[VistaKing]

I think you will have to wait until Cottonball logs in and helps you out.

 

[nottaclue9]

OK. Sorry to be a pain!

 

[VistaKing]

No pain not at all. No need to apologize. He was helping you

 

[cottonball]

nottaclue9,

Let's go back to Post #43 and please use the Malwarebytes Anti-Rootkit Download
Save to the Desktop (easy to find)

Right-click the downloaded file and select: Extract here...
In the MBAR folder that appears on the Desktop, open it, and double-click the MBAR application.

At the main program console (images courtesy of BleepingComputer), click: Next

At the Update Database prompt, click: Update

When the update is done, click: Next

At the Scan System prompt, under Scan targets, check: Drivers, Sectors, and System (If these items are already checked, that's fine.) Now, click on the SCAN button!

The results from the scan are shown as follows (just an example):

If any threats are reported, DO NOT click on the Cleanup button to remove them!!!

At this point go back to the MBAR folder on the Desktop, and look for two reports:
1. system-log.txt
2. mbar-log-2013-04-30 (20-13-32).txt
(corresponds to mbar-log-year-month-day (hour-minute-second).txt)

Please post or attach the mbar-log and the system-log in your reply.

On the Cleanup screen, just press: Exit

 

[nottaclue9]

Sorry, cottonball. I just now found your post, which I was happy to find! I thought I'd been abandoned.

Really dumb question: I pull up the Anti-Root Kit and "create shortcut" to my desktop and then run it from there?

PS I ran malware bytes, full scan, over the week-end and one item was detected. I removed it. I would have saved the report for you, but I had no idea you'd posted.

 

[cottonball]

Thought you had given up...I do not abandon anyone without letting them know that I'll be jumping off the boat.

If you ran Malwarebytes Anti-Malware, and you still have the program, just open the program and go to the Logs tab. The report should be there.

I pull up the Anti-Root Kit and "create shortcut" to my desktop and then run it from there?

Yes.

 

[nottaclue9]

So, nothing is ever easy. From my desktop, I clicked on "Download," and Windows ran a security check. It led me to an mbar zip file that was run on 3/22. Apparently, the computer guy left this on my computer? The date corresponds to the time it was being worked on.
I can't figure out how to make it go away. I can't download the rootkit until this thing is gone. I can't get past that page, and cannot delete it.

 

[VistaKing]

When you downloaded MBAR did you save it to the Desktop ? You should have a folder with a zipper on it . Right click on that folder it should be called MBAR and choose Extract All ... then click on the Extract button . When its done you should have the same folder on your desktop called MBAR just without the zipper icon .

Do you have that ?

 

[nottaclue9]

"Extract" is not one of the choices when I right click on the folder. I get "Open, Explore (boldface), CUt, Copy, Delete, Properties." I decided to click on "Explore," but it was just a list of jabberwocky that I don't recognize.

There isn't anything connected to this folder on my desktop.

 

[VistaKing]

Can you post a scrnshot of your desktop using the snipping tool ?

Click on the rb: button type snipping tool and press <ENTER> then hold the left button of the mouse and drag your mouse so you get an image is your desktop . Then release . Click save and upload the image .

You could use tinypic.com to upload the pic and use the entire thing inside the

 

[nottaclue9]

There are 2 RK reports in my recycle bin. But there's nothing of interest on my desktop. I don't keep a lot of stuff there.

 

[VistaKing]

Take a look at your C:\Users\{your account name}\Downloads folder and see if you have the MBAR.zip file in there and right click that folder and choose Extract All... Them click the browse button and click Desktop . Then click on Extract . You should then see a folder called MBAR on your desktop .

 

[nottaclue9]

So I extract twice?

 

[nottaclue9]

I have tried to copy/paste the five items that come up when I search C:\Users\Judy\Downloads, but "paste" isn't an option when I get back to the board. There is nothing there about MBAR. The only way I can get to that folder is to try to download the rootkit.

 

[VistaKing]

Download the malwarebytes anti- rootkit . If it asks where you want to download it to . Click on the desktop and click Save . After you're done downloading go to your desktop and you should see MBAR folder ( should have a zipper on it ) . Right click the folder choose Extract All... On the extract all window click on the Extract button. Once its done it will open up the MBAR folder .

 

[nottaclue9]

I have already tried that. "Extract" isn't one of the choices I get when I click on it.

I feel badly that you guys are trying to help me, and I am apparently not being cooperative! I'm doing my best, but there are things here on this computer that don't seem to be behaving nicely.

I really have to go to bed. Have to take the dog to the vet in the morning & need to catch a few zzz's first. Tomorrow is sort of a train wreck until later in the evening. Y'all up for that?

 

[VistaKing]

I'm up for that .