Malware has Destroyed my PC! Please Help!

I would like for you to download & run this file :> http://download.bleepingcomputer.com/sUBs/grab.exe

Grab.exe is an exploratory tool for troubleshooting ComboFix issues. What it'll do is search your machine for ComboFix's working folder. When found, it will create a zip file comprising of files from that folder. This zipped file shall be named _sUBs-.zip & should be located on your Desktop. I shall need for you to upload this file to > http://www.bleepingcomputer.com/submit-malware.php?channel=4

Hopefully, from those files I can find out what went wrong.

Edit :--- Please follow sUBs instructions


cheers sUBs

I just had this pop up window appear on my screen:
hxxp://media.fastclick.net/w/safepop.cg ... 8729045056

it's the first time I've had an issue since we've been trouble shooting.

I followed your directions and got this message:

Your file was successfully submitted. Please let the user helping you know that you have submitted the file.

sUBs will examine the files and logs that you have sent, and then either post directly here or inform me what is going on with your machine.

Please be patient, as sUBs has an awful lot to do.
(to be honest, I don't think he ever sleeps )

Thank you so much for all your help!

It looks like it is your resident protection that is causing problems with ComboFix.
Please do the following.


Reboot in safe mode

To reboot in safe mode
You can boot in Safe Mode by restarting your computer, then continually tapping F5 OR F8 until a menu appears.
Use your up arrow key to highlight Safe Mode, then hit enter.

Run ComboFix using these instructions:

Click the Windows 'Start' button > Select 'Run' - then copy/paste the following bolded text into the run box & click OK.

"%userprofile%\\desktop\\combofix.exe" /killall

When finished, it shall produce a log for you. Post that log in your next reply.

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall.


Reboot to normal mode.

Let's take a fresh look at what is installed


Installed Programs

Please could you give me a list of the programs that are installed.

• Start HijackThis
• Click on the Misc Tools button
• Click on the Open Uninstall Manager button.

You will see a list with the programs installed in your computer.
Click on save list button and specify where you would like to save this file.
When you press Save button a notepad will open with the contents of that file.
Simply copy and paste the contents of that notepad into your next post.

I pasted the "%userprofile%\\desktop\\combofix.exe" /killall file into the run box while in safe mode but a message appeared indicating the file could not be found.

Did you log in to your normal account whilst in safe mode ?

Please try the following

Whilst in safe mode
Click the Windows 'Start' button > Select 'Run' - then copy/paste the following bolded text into the run box & click OK.

"combofix.exe" /killall

I followed these directions and the same messge appeared. Should I log in as administrator while in safe mode?

I apologize for the delay. I've been having connectivity problems.

You need to log in to the account that you normally log into,

I logged into the regular account and the administrator but I was unable to run it each time.

Combofix has had some major updates in the last couple of days, so delete the copy you have and do the following.

Download Combofix from one of the links below :

ComboFix.exe 1
ComboFix.exe 2
ComboFix.exe 3


Move ComboFix to your C:\ drive so that its path is C:\Combofix.exe ( you can just drag and drop it )
This way, it won't matter what account you log into.
Boot to safe mode

Click Start > Run and copy/paste the following

C:\combofix.exe /killall

I was finally able to run combofix in safe mode but I still could not get a log to open up after the scan. I will try to run the scan as the administrator and see if there will be any difference.