Issues logging into Windows.

[cottonball]

GilV37,

Do you get the message "xxx couldn't be downloaded" with anything you attempt to download, or just with photo.jpg?

 

[VistaKing]

cottonball

Looks like he gets that with anything . Had him try to download DDS and got the same error .

 

[cottonball]

OK, thanks.

 

[cottonball]

It appears that the "xxx Couldn't be downloaded" is happening with ‏Internet Explorer 10

You may be able to download without problem in IE 9.

If you wish to give IE 9 a whirl...it is up to you.

Just let us know.

 

[GilV37]

ok how do I downgrade?

 

[VistaKing]

To Downgrade IE 10 to IE 9 :

Click on rb: >Control Panel>Programs>Programs and Features or type Programs and Features inside the Search programs and files box . Press Enter once Programs and Features is under Programs (1) .

:ar: Click on View installed updates on the left pane.

:ar: Once installed updates are displayed on right-pane, select Windows Internet Explorer 10 and click Uninstall button

:ar: Click Yes to proceed with the uninstall and further click on restart now button to uninstall IE10

 

[GilV37]

ok if need be, I will do this tomorrow.

 

[cottonball]

We you able to get IE9 going?

If so, are you still getting the notice: "xxx couldn't be downloaded"?

 

[GilV37]

I downgraded to ver. 9 and yes still having the issue. Been working with Vistaking on that.

 

[cottonball]

Please run Farbar Service Scanner once again, and post its report.

Next, please download Junction.zip:
http://download.sysinternals.com/Files/Junction.zip
Save it to the Desktop.

Unzip and place junction.exe in the Windows directory (C:\Windows), but do not run it.

Please open Notepad (Start > All Programs > Accessories > Notepad) and copy/paste the text in the code box below into Notepad:

@ECHO OFF
dir /a/b c:\windows\junction.exe >c:\log.txt 2>&1
junction -s c:\>>c:\log.txt
echo.End of Scan >>c:\log.txt
notepad c:\log.txt

Go to the File menu at the top of Notepad and select: Save As...
Save in: Desktop
Fill in File name with: findjunction.bat
Save as type: All file types (*.*)
Click: Save
Close Notepad.

Now, locate findjunction.bat on the Desktop.
Right-click it and select: Run as Administrator.

The command prompt opens, and then Notepad opens...

Please provide the content of the log.txt in your reply.

 

[GilV37]

Attached is the FSS report. And when i went to download junction.zip, i got an error. I also attached that a screen shot in MS Word.

 

[cottonball]

Hmmm....

Try downloading from here: Junction

 

[GilV37]

hello Cottonball. i Ran that file as requested, and the DOS screen is just hanging with a blinking cursor. Is this normal?

 

[GilV37]

actually it just finished.

 

[cottonball]

GilV37,

We are not done.

The infection you were initially confronted with also brought with it a new malware variant that affects Microsoft Security Essenials and/or Windows Defender. It creates symbolic links to their folders and files, which, in turn, affects path-name resolution. In plain English means "can't get there from here".

This infection is very recent, so we had no idea what it was, or, what was involved. Taking care of this variant of ZeroAccess should also restore the ability to download files.

For now, please do not engage in any other repairs, as they will not help matters.

Need to take a good look at the last report you provided which identifies symbolic links. There are quite a few of them, but, it appears that Microsoft Security Essentials is not involved.

More than likely, will not get back to you until tomorrow.

Thank you for your patience.

 

[GilV37]

That is fine... I can not thank you enough for helping me out with this. what ever it takes i'll be patient. You, VistaKing, and Jacee are a life saver!!! you told me that you get paid by reps. Please tell me how to do that.

Thanks again!!!

 

[cottonball]

We're dealing with a brand new infection, so, have to proceed cautiously.

Thank you for being so patient.

 

[cottonball]

GilV37,

One more item, tonight, if possible.

Please remove the old copy of FRST64, the already used fixlist,txt, and the fixlist report from the Desktop. Then, download a new copy of the Farbar Recovery Scan Tool Download
Select the 64-bit version.
Save it to your Desktop.

Next, copy/paste all the text inside the quote box to Notepad (Do not copy the word 'Quote')

Unlock: C:\Program Files\Windows Defender
Folder: C:\Program Files\Windows Defender

In Notepad, click File (at the top), and select: Save As...
In the Save as prompt, name the file fixlist.txt, and save it to the Desktop <<---Important!!

NOTE. It is important that FRST64 and the fixlist.txt are in the same location (Desktop) or this will not work.

Now, run FRST64 and press the Fix button, just once, and wait.

When done, the tool makes a log on the Desktop: Fixlog.txt
Please post the new Fixlog.txt in your reply.

 

[cottonball]

GilV37,

Please press on with the previous post, but, only get a new copy of the Farbar Recovery Scan Tool Download
Disregard the rest, if you have not done the task, and do the following:
(If you have already done the above, then post the results. No problem.)

We need to scan the system with a special tool...

• Please download Junction v1.06: Junction
• Save it to the Desktop.
• Unzip it and place junction.exe in the Windows directory (C:\Windows). Do not run it.
• Open Notepad (Start > All Programs > Accessories > Notepad) and copy/paste the text in the code box to Notepad:
  
  

  @ECHO OFF
  dir /a/b c:\windows\junction.exe >c:\log.txt 2>&1
  junction -s c:\>>c:\log.txt
  echo.End of Scan >>c:\log.txt
  notepad c:\log.txt

• Go to the File menu at the top of the Notepad and select: Save As...
• • Select Save in: Desktop
  • Fill in File name: findjunction.bat
  • Save as type: All file types (*.*)
  • Click: Save
  • Close Notepad.
  • Locate findjunction.bat on the Desktop. It looks like this:
    
  • Right-click and select: Run as Administrator
  • The command prompt opens, and then Notepad opens.

Please attach or copy/paste the log.txt your reply.

 

[GilV37]

i didnt do the first post. just the findjunction program.