BleepingComputer.com: Privacy protection messed up my computer

I am new to the forum here and see the same problems that others have had and tried many of these items but they have not worked.

I ran Rkill, found three items including a TD something or another but could not cure. So I left it as skip like I was told to. I ran the Malware like I was supposed to but the internet will not come back up.

So I tried to run Combo fix, problem is when I do it tells me to turn off my AVG. Problem is the icon in not on my computer anymore and when I go into my programs I have no idea where to click.

I tried doing the FSS but it seems with the AVG running that I am stuck. I can not do anything with the computer and would like to get rid of this virus and get it back up and running. Running Windows XP on my computer. I have a feeling it is something simple. I even tried to uninstall my AVG which I thought it did but then I restarted the computer and it said it was still running.

Please let me know what I can do to get this fixed.

Please note that I do not have access while I am at work so any post will be answered the very next morning with any reply or information that is requested to help with this matter.

Thank you.

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.


Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:

• Download DDS by sUBs from one of the following links. Save it to your desktop.
  • DDS.scr
    
  • DDS.pif
  
  
• Double click on the DDS icon, allow it to run.
  
• A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  
• Notepad will open with the results.
  
• Follow the instructions that pop up for posting the results.
  
• Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE


And

Please download DeFogger to your desktop.

Double click DeFogger to run the tool.

• The application window will appear
• Click the Disable button to disable your CD Emulation drivers
• Click Yes to continue
• A 'Finished!' message will appear
• Click OK
• DeFogger will now ask to reboot the machine - click OK

IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.


Then

Please download GMER from one of the following locations and save it to your desktop:

• Main Mirror
  This version will download a randomly named file (Recommended)
  
• Zipped Mirror
  This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.

• Disconnect from the Internet and close all running programs.
  
• Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.
  
• Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.
  
• Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.
  
  
  
  
• GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)
  
• If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.
  
• Now click the Scan button. If you see a rootkit warning window, click OK.
  
• When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.
  
• Click the Copy button and paste the results into your next reply.
  
• Exit GMER and re-enable all active protection when done.

-- If you encounter any problems, try running GMER in Safe Mode.

Ok I will download these items and run them on my computer and post everything in the next few days.

Thanks for the help

Okay

I have attached the DDS and the GMER per the instructions, please let me know how to proceed next.

Thank you.

Okay, we need to find the problem so please run aswMBR

Please download aswMBR ( 511KB ) to your desktop.

• Double click the aswMBR.exe icon to run it
  
• Click the Scan button to start the scan
  
• On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

Hi,

I have not had a reply from you for 3 days. Can you please tell me if you still need help with your computer as I am unable to help other members with their problems while I have your topic still open. The time taken between posts can also change the situation with your PC making it more difficult to help you.

If you like you can PM me.

Thanks,

m0le

Sorry weekend there, could not get to a computer, I have attached the MBR as you asked, did not seem to take long and put much in the dialog, but I have attached it, let me know what to do next.

Thanks.

I'd like an MBRCheck log now

Please download MBRCheck to your desktop.

1. Double click MBRCheck.exe to run it (Right click and run as Administrator for Vista).
2. It will open a black window, please do not fix anything (if it gives you an option).
3. Exit that window and it will produce a log (MBRCheck_date_time).
4. Please post that log when you reply.

Here is the MBR Check that you asked for.

Thanks

We could certainly do with a run of Combofix but AVG is a stubborn antivirus.

Please run SystemLook. The string avg isn't likely to bring up false search results but be aware that this may take some time and produce a large log.

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
  
• Copy the content of the following codebox into the main textfield:
  

  :filefind
  *avg*
  :folderfind
  *avg*
  :regfind
  *avg*
  

  
  
  
• Click the Look button to start the scan.
  
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

I will do this over the weekedn and post on Monday. If I can get to a computer before then I will post sooner.

Thank you,

Here is the system look

That's quite a lot of folders. Let's try AVG's uninstaller first and see if that allows Combofix to run

Download and run it from here

If Combofix still won't run then please rerun the SystemLook script as before.