Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Dept. Justice Virus: I cant access desktop


  • This topic is locked This topic is locked
11 replies to this topic

#1 84Ed

84Ed

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 15 August 2014 - 10:52 AM

Hello, I am new to the forum and hoping for some help.  I have a windows 7 operating system with windows xp and 7 installed.  I got the screen lock with the dept.of justice page two days ago and have been unable to access windows 7.  I still can get into xp as usual.

 

I have tried lots of things but with no success.  I have tried, safe mode, system restore, boot from win 7 install disk, hitman... via USB drive and Norton bootable recovery disk. 

 

Norton removed 10 files it deemed high risk.  One file was unable to remove. "DownLoader".  this file address:

 

 c:\users\Aragorn\Appdata\roaming\microsoft\windows\ieupdate\Syskey.exe

 

all attempts lead to computer rebooting itself when attempting to boot up.  I would really appreciate some help. 

 

Ed



BC AdBot (Login to Remove)

 


#2 84Ed

84Ed
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 17 August 2014 - 11:44 AM

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:16-08-2014 03
Ran by SYSTEM on MININT-8T4N46P on 18-08-2014 14:23:00
Running from H:\
Platform: Windows 7 Home Premium Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet002
[b]ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.[/b]


The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\Aragorn\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [143360 2006-12-23] (Nero AG)
HKU\Aragorn\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-06-05] (TomTom)
HKU\Aragorn\...\Policies\Explorer: [Run] "C:\Users\Aragorn\AppData\Roaming\Microsoft\Windows\IEUpdate\syskey.exe"

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 lxbc_device; C:\Windows\system32\lxbccoms.exe [537520 2007-03-15] ( )

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 PxHelp20; System32\Drivers\PxHelp20.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-18 14:22 - 2014-08-18 14:23 - 00000000 ____D () C:\FRST
2014-08-17 10:53 - 2014-08-17 15:27 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____D () C:\Windows\Microsoft Antimalware
2014-08-16 08:31 - 2014-08-16 08:31 - 00000000 ____D () C:\NPE
2014-08-16 03:25 - 2014-08-16 03:26 - 00000000 ____D () C:\NBRT
2014-08-15 00:45 - 2014-08-15 00:45 - 00000000 ____D () C:\Temp
2014-08-11 12:12 - 2014-08-11 17:56 - 00000000 ___HD () C:\Users\Public\Documents\Report
2014-08-03 07:59 - 2014-05-14 08:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2014-08-03 07:59 - 2014-05-14 08:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2014-08-03 07:59 - 2014-05-14 08:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2014-08-03 07:59 - 2014-05-14 08:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2014-08-03 07:59 - 2014-05-14 08:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2014-08-03 07:59 - 2014-05-14 08:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2014-08-03 07:59 - 2014-05-14 08:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2014-08-03 07:59 - 2014-05-14 05:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2014-08-03 07:59 - 2014-05-14 05:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-18 14:23 - 2014-08-18 14:22 - 00000000 ____D () C:\FRST
2014-08-17 15:27 - 2014-08-17 10:53 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0
2014-08-17 00:23 - 2008-08-17 12:21 - 00000000 ____D () C:\Backed Up Stuff
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____D () C:\Windows\Microsoft Antimalware
2014-08-16 08:31 - 2014-08-16 08:31 - 00000000 ____D () C:\NPE
2014-08-16 03:26 - 2014-08-16 03:25 - 00000000 ____D () C:\NBRT
2014-08-15 00:45 - 2014-08-15 00:45 - 00000000 ____D () C:\Temp
2014-08-12 22:50 - 2009-07-13 18:37 - 00000000 ____D () C:\Windows\System32\LogFiles
2014-08-12 18:44 - 2012-10-20 11:30 - 00000905 _____ () C:\Windows\MSOFFICE.INI
2014-08-12 18:44 - 2009-07-13 20:34 - 00020496 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-12 18:44 - 2009-07-13 20:34 - 00020496 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-12 18:44 - 2001-12-31 23:26 - 01141146 _____ () C:\Windows\WindowsUpdate.log
2014-08-12 18:41 - 2010-11-20 13:48 - 00045932 _____ () C:\Windows\PFRO.log
2014-08-12 18:41 - 2009-07-13 20:39 - 00044723 _____ () C:\Windows\setupact.log
2014-08-11 17:56 - 2014-08-11 12:12 - 00000000 ___HD () C:\Users\Public\Documents\Report
2014-07-27 18:35 - 2012-10-20 11:30 - 00001600 _____ () C:\Windows\EXCEL5.INI
2014-07-27 13:34 - 2012-06-01 15:32 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

==================== Known DLLs (Whitelisted) ============


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points  =========================


==================== Memory info =========================== 

Percentage of memory in use: 13%
Total physical RAM: 3967.3 MB
Available physical RAM: 3415.3 MB
Total Pagefile: 3965.59 MB
Available Pagefile: 3456.95 MB
Total Virtual: 2047.88 MB
Available Virtual: 1951.32 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:213.34 GB) (Free:162.34 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (New Volume) (Fixed) (Total:19.54 GB) (Free:9.81 GB) NTFS
Drive e: (GSP1RMCHPFRER_EN_DVD) (CDROM) (Total:2.39 GB) (Free:0 GB) UDF
Drive h: (KINGSTON) (Removable) (Total:3.75 GB) (Free:3.75 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 66396639)
Partition 1: (Active) - (Size=213.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=19.5 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 3.8 GB) (Disk ID: 04030201)
Partition 1: (Active) - (Size=3.8 GB) - (Type=0B)


LastRegBack: 2014-08-08 05:00

==================== End Of Log ============================


#3 HelpBot

HelpBot

    Bleepin' Binary Bot


  • Bots
  • 12,704 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:07 AM

Posted 20 August 2014 - 10:55 AM

Hello and welcome to Bleeping Computer!

I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

To help Bleeping Computer better assist you please perform the following steps:

***************************************************

step1.gif In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.

CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/544512 <<< CLICK THIS LINK



If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.

***************************************************

step2.gifIf you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:

  • If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.
  • A new DDS log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
    • Please do this even if you have previously posted logs for us.
    • If you were unable to produce the logs originally please try once more.
    • If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
    • If you are unsure about any of these characteristics just post what you can and we will guide you.
  • Please tell us if you have your original Windows CD/DVD available.
  • Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.

Thank you for your patience, and again sorry for the delay.

***************************************************

We need to see some information about what is happening in your machine. Please perform the following scan again:

  • Download DDS by sUBs from the following link if you no longer have it available and save it to your destop.

    DDS.com Download Link
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control can be found HERE.

As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

#4 84Ed

84Ed
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 22 August 2014 - 03:37 AM

I cannot download dds to sick computer because i cannot access desktop. Im in a no boot condition.j

#5 The Pugilist

The Pugilist

  • Members
  • 826 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:07 AM

Posted 22 August 2014 - 08:14 PM

Hello 84Ed, welcome to BleepingComputer

 

My name is Dave and I'll be assisting you here.  Please give me a bit to review the information you've provided.  In the mean time, please refrain from making further modifications to your machine as it can make it very difficult for me to help you.

 

I'll post back here with instructions asap.


//Dave

#6 84Ed

84Ed
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 23 August 2014 - 06:59 AM

good morning Dave, thanks for helping me get my computer functioning again!

 

Since my first posts, I have run a few programs to try and repair and applied one fix through FRST. 

 

I will post Fix log and newest scan  below.  the fix did not fix the boot problem.

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:19-08-2014
Ran by SYSTEM at 2014-08-20 20:27:20 Run:1
Running from h:\
Boot Mode: Recovery

 

==============================================

Content of fixlist:
*****************
HKU\Aragorn\...\Policies\Explorer: [Run] "C:\Users\Aragorn\AppData\Roaming\Microsoft\Windows\IEUpdate\syskey.exe"
C:\Users\Aragorn\AppData\Roaming\Microsoft\Windows\IEUpdate
*****************

HKU\Aragorn\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\Run => value deleted successfully.
C:\Users\Aragorn\AppData\Roaming\Microsoft\Windows\IEUpdate => Moved successfully.

==== End of Fixlog ====

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:19-08-2014
Ran by SYSTEM on MININT-E46132I on 24-08-2014 09:55:41
Running from f:\
Platform: Windows 7 Home Premium Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Recovery

 

The current controlset is ControlSet002
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [155648 2006-01-12] (Nero AG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\Aragorn\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [143360 2006-12-23] (Nero AG)
HKU\Aragorn\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-06-05] (TomTom)

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 lxbc_device; C:\Windows\system32\lxbccoms.exe [537520 2007-03-15] ( )

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 PxHelp20; System32\Drivers\PxHelp20.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-21 02:31 - 2014-08-21 02:31 - 00000000 ____D () C:\boot-sav
2014-08-18 14:22 - 2014-08-24 09:55 - 00000000 ____D () C:\FRST
2014-08-17 10:53 - 2014-08-22 17:48 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____D () C:\Windows\Microsoft Antimalware
2014-08-16 08:31 - 2014-08-16 08:31 - 00000000 ____D () C:\NPE
2014-08-16 03:25 - 2014-08-16 03:26 - 00000000 ____D () C:\NBRT
2014-08-15 00:45 - 2014-08-15 00:45 - 00000000 ____D () C:\Temp
2014-08-11 12:12 - 2014-08-11 17:56 - 00000000 ___HD () C:\Users\Public\Documents\Report
2014-08-03 07:59 - 2014-05-14 08:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2014-08-03 07:59 - 2014-05-14 08:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2014-08-03 07:59 - 2014-05-14 08:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2014-08-03 07:59 - 2014-05-14 08:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2014-08-03 07:59 - 2014-05-14 08:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2014-08-03 07:59 - 2014-05-14 08:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2014-08-03 07:59 - 2014-05-14 08:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2014-08-03 07:59 - 2014-05-14 05:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2014-08-03 07:59 - 2014-05-14 05:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-24 09:55 - 2014-08-18 14:22 - 00000000 ____D () C:\FRST
2014-08-22 17:48 - 2014-08-17 10:53 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0
2014-08-21 02:31 - 2014-08-21 02:31 - 00000000 ____D () C:\boot-sav
2014-08-17 00:23 - 2008-08-17 12:21 - 00000000 ____D () C:\Backed Up Stuff
2014-08-16 22:49 - 2014-08-16 22:49 - 00000000 ____D () C:\Windows\Microsoft Antimalware
2014-08-16 08:31 - 2014-08-16 08:31 - 00000000 ____D () C:\NPE
2014-08-16 03:26 - 2014-08-16 03:25 - 00000000 ____D () C:\NBRT
2014-08-15 00:45 - 2014-08-15 00:45 - 00000000 ____D () C:\Temp
2014-08-12 22:50 - 2009-07-13 18:37 - 00000000 ____D () C:\Windows\System32\LogFiles
2014-08-12 18:44 - 2012-10-20 11:30 - 00000905 _____ () C:\Windows\MSOFFICE.INI
2014-08-12 18:44 - 2009-07-13 20:34 - 00020496 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-12 18:44 - 2009-07-13 20:34 - 00020496 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-12 18:44 - 2001-12-31 23:26 - 01141146 _____ () C:\Windows\WindowsUpdate.log
2014-08-12 18:41 - 2010-11-20 13:48 - 00045932 _____ () C:\Windows\PFRO.log
2014-08-12 18:41 - 2009-07-13 20:39 - 00044723 _____ () C:\Windows\setupact.log
2014-08-11 17:56 - 2014-08-11 12:12 - 00000000 ___HD () C:\Users\Public\Documents\Report
2014-07-27 18:35 - 2012-10-20 11:30 - 00001600 _____ () C:\Windows\EXCEL5.INI
2014-07-27 13:34 - 2012-06-01 15:32 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

==================== Known DLLs (Whitelisted) ============

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points  =========================

==================== Memory info ===========================

Percentage of memory in use: 12%
Total physical RAM: 3967.3 MB
Available physical RAM: 3461.21 MB
Total Pagefile: 3965.59 MB
Available Pagefile: 3463.3 MB
Total Virtual: 2047.88 MB
Available Virtual: 1956.21 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:213.34 GB) (Free:162.22 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (New Volume) (Fixed) (Total:19.54 GB) (Free:9.81 GB) NTFS
Drive e: (GSP1RMCHPFRER_EN_DVD) (CDROM) (Total:2.39 GB) (Free:0 GB) UDF
Drive f: (KINGSTON) (Removable) (Total:3.75 GB) (Free:3.75 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: 66396639)
Partition 1: (Active) - (Size=213.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=19.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 3.8 GB) (Disk ID: 04030201)
Partition 1: (Active) - (Size=3.8 GB) - (Type=0B)

LastRegBack: 2014-08-08 05:00

==================== End Of Log ===========================

if your wondering about the font size, so am I. this healthy computer uses XP and just started minifying the font size. I have increased the font size so you can read it.......any fix for this?

 



#7 The Pugilist

The Pugilist

  • Members
  • 826 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:07 AM

Posted 23 August 2014 - 11:29 AM

Ed,

 

In doing some research, I've found a thread on a different forum that is very similar to this one.  Did you open this thread too and are you being actively assisted there?  If so, I would advise that you only have one person helping you at a time.  Getting assistance from multiple places at once could lead to great confusion and possibly further complicate your situation. 

 

If not, just let me know and we'll go ahead with fixing your problem.


//Dave

#8 84Ed

84Ed
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 23 August 2014 - 12:00 PM

Hi Dave,

 

here are the facts.  I came to this forum and posted my issue. more than a week ago.  As you know that is a long time to have your computer locked up!  in waiting

 

I did post to the other forum, and began to get help.  the moderator/helper lives in Germany, and for whatever reason, my work, his work, time difference etc.  the back and forth response time is very long, now more than a day since he was last active.  you understand.  I perform a requested scan. ten minutes later, I post the result and a whole day goes by....

 

My hope is to get this computer running.  I understand running parallel posts wont work.  I would be happy to terminate the other post if you are willing to help me.

 

thanks,  Ed



#9 84Ed

84Ed
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 24 August 2014 - 11:21 AM

Hi Dave,

 

I am waiting for you to tell me if you will help me.  as I said, I will end the other thread  if you agree to help.  thanks,

 

Ed



#10 84Ed

84Ed
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:05:07 AM

Posted 25 August 2014 - 08:24 AM

Dave, never mind.

 

close this topic for me.

 

thanks



#11 The Pugilist

The Pugilist

  • Members
  • 826 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:07 AM

Posted 25 August 2014 - 08:29 AM

Ed,

 

Sorry for the slow reply.  I think that it is best to continue with your thread on the malwarebytes forum as the reply times you're experiencing there are the same as they would be here (24-48 hours is normal for reply times, especially on weekends).

 

If your other thread concludes and you still are experiencing issues, feel free to either reopen this thread or start a new one, but until then, for the sake of simplicity, I would stick with the thread you already have open.


//Dave

#12 whoabuddy

whoabuddy

    Bleepin' Verbose


  • Malware Response Instructor
  • 2,053 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cottonwood, AZ
  • Local time:01:07 AM

Posted 25 August 2014 - 08:40 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.
Meditate. Elevate. Appreciate. | "Life is a journey, love is the destination, happiness is the path!"
If I am helping you and have not responded within 48 hours, please send me a PM.
Vi Veri Universum Vivus Vici (VVVVV)
Excellent Security Advice
Proud member of UNITE




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users