Turner31

My background has been hijacked and says "Your system is infected. system stopped due to serious malfunction". I have lost administrative powers and have been locked out of system restore and my registry editor, among other things. I have downloaded at least 10 Malware/Spyware/virus scanners and tried to run them. Every time a scan begins to run the virus shuts the program down and i am no longer able to even open the program that was scanning. Also, when i try to run in safe mode, i get a blue screen that says something like my 'computer had a serious error and must shut down'. I'm at my wits end and have exhausted all options that are known to me. If someone could PLEASE help me resolve this problem i would be extremely grateful.
Thanks for your time.

forhockey

Hi Turner31,

Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription.

If you still require assistance and are not seeking help elsewhere, then please carry out my instructions here

Please reply back with the following logs:

• DDS.txt - copy/pasted directly into Reply box
• Attach.zip (contains Attach.txt and ARK.txt) - attached to post

Turner31

Thanks for the reply.
I have tried all 3 links attempting to run the dds file. The black screen explaining the dds process would either pop up and disappear immediately, or it would stay on the screen and no matter what i tried it there would be no pop-up or log files created. What should I do?

forhockey

Try the following tool..

Please perform the following:

• Download RSIT by random/random and save it to your desktop.
• Double click RSIT.exe to start the tool and click Continue at the disclaimer.
• When the scan completes it will open a log named log.txt maximized, and a log named info.txt minimized.
• Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of both here.

--------------------------------------------------------------


Download GMER Rootkit Scanner from Here

• Note: You are downloading a randomly named EXE because some malware won't let gmer.exe launch
• Double click on the randomly named gmer executable (.exe) . If asked to allow gmer.sys driver to load, please consent .
• If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan..
  
  
  
  Click the image to enlarge it
  
  
  
• In the right panel, you will see several boxes that have been checked. Uncheck the following ...
  • Sections
  • IAT/EAT
  • Drives/Partition other than Systemdrive (typically C:\)
  • Show All (don't miss this one)
• Then click the Scan button & wait for it to finish.
• Once done click on the [Save..] button, and in the File name area, type in "ark.txt" or it will save as a .log file which cannot be uploaded to your post.
  
• Save it where you can easily find it, such as your desktop

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries