I know I was infected by Windows Restore virus for sure. Things that I had happen were the pop up your hard drive is corrupt message, I got locked out of a ton of folders, it hid folders and hide my desktop icons and hide the program files. It removed my access to the Accessory folder and removed it from my program list in the start button. I would get java error messages when I restarted while I could hear ads I couldn't see a video but heard the audio like 3 in a row when started. It did something to my system restore. I was able to finally find it but when I run it it lets me choose date then initiates sits at the blue windows screen saying system restore is initialing...... it goes through the process but takes awhile then it restarts and nothing changed then 10 minutes after boot a message comes up saying restore was unsucessful. I'm still locked out of some places I get the need administrator permission and I only have one account which is my admin account and it shows full permission granted.If I open IE it will go directly to ad site even though I have homepage set at google. If I go to google and do a search it finds results but if you click they redirect. The only browser that I can go directly to sites or download malware programs with is Minesfield. Goolge chrome,ie and firefox all have issues.Also I know get an annoying message when running virus scans about"No disk is in the drive..something about DR1.dll or something.
Now some of what I have gone through so far. I have restored my desktop icons and unhide the missing program folders. I have access to my accessory folder but shortcut in start>prgrams is still missing. I have done a few different cleanings in safe mode. I have used malwarebytes updated definitions which cleaned roughly 60 found items. I have run Spy bot search and destroy which found 31 infections after malwarebytes cleaned. i have run super anti virus which cleaned like 18 items. I completely uninstalled Firefox and all related files and setting then used a copy on a usb stick to fresh install, I uninstalled the ie 9 uipdate. I have run smitfraud which is iffy as I think something is trying to stop it as it doesn't seem right and I cant update it.I was getting ready to come here so i knew id need to download combofix to my desktop so i have it but haven't run it yet as i know it is prefered to wwait on posting or running randomly and better to go through mods steps as requested.
So thats where I am at so I am ready to begin following directions to see what we can do....Let me know what is needed for the first step and I'll get to it. Again thanks in advance for all help....
Edited by Budapest, 10 April 2011 - 08:59 PM.
Moved from Virus, Trojan, Spyware, and Malware Removal Logs ~Budapest