Never been so infected

[cobb]

I have pop ups all over the place, I can not even get to a point where I can provide all the requested information. Please help
Tell me what I should try first.

 

[cobb]

Hot darn, I think I finally got a Hijack this file

 

[cobb]

It appears that there is one reply but when I try to open it, I am sent every where plus.. HELP PLEASE

 

[cobb]

Trying to open the replies takes me to a site "1 800-Desktop" and will not let me open the relies. At great risk, I provide personal email. [email protected]

 

[cobb]

I have attached a word doc with as much info as I can think of up to now.

Although this is in my attachment, her is the system info.
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz, x86 Family 6 Model 15 Stepping 6
Processor Count: 2
RAM: 3317 Mb
Graphics Card: Intel(R) Q965/Q963 Express Chipset Family, 128 Mb
Hard Drives: C: Total - 305234 MB, Free - 90861 MB; D: Total - 953859 MB, Free - 9611 MB; F: Total - 238472 MB, Free - 62755 MB; G: Total - 305242 MB, Free - 188432 MB; S: Total - 953634 MB, Free - 409181 MB;
Motherboard: Intel Corporation, DQ965GF
Antivirus: Microsoft Security Essentials, Updated: Yes, On-Demand Scanner: Disabled

 

[JSntgRvr]

Welcome

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Make sure that under Optional Scans, there is a checkmark on Addition.txt and Shortcut.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
• The tool will also produce another two logs (Addition.txt and Shortcut.txt). Please attach these to your reply.

 

[cobb]

Farbar downloaded and is running. Does the scan check all drives?

 

[JSntgRvr]

No. Just the drive containing the Operating System.

 

[cobb]

Whew, thanks. I have 4 drives in this pc, and even the system drive is taking a long time. BTW, thank you for your reply to my problem. Greatly appreciated.

 

[JSntgRvr]

It shouldn't take long.

 

[cobb]

It is only a 300g drive, and it is still pumping away

 

[cobb]

It is getting very late in PR, (a wonderful island that I have visited often) and my scan is still running, perhaps you would prefer to continue when you can tomorrow.

 

[JSntgRvr]

 

[cobb]

Hello again, and wishes for a good day for you. The program is still running. It appears to have finished the FRST.txt, but there is very little in the Addition.txt, and the Shortcut.txt is not on the desktop. I have copied the two files (to cause as little interruption to the file as possible) and have attached the copies.

 

[JSntgRvr]

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

Download AdwCleaner from here. Save the file to the desktop.


NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.

Close all open windows and browsers.

• XP users: Double click the AdwCleaner icon to start the program.
• Vista/7/8 users: Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.
  You will see the following console:

• Click the Scan button and wait for the scan to finish.
• After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Pending. Please uncheck elements you don't want to remove.
• Click the Clean button.
• Everything checked will be deleted.
• When the program has finished cleaning a report appears.Once done it will ask to reboot, allow this

• On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[S0].txt

Please download Malwarebytes' Anti-Malware from Here.

Double Click mbam-setup-2.0..exe to install the application. (The revision number may vary.)

• Select the language and click OK.
• Accept the agreement
• Make sure a checkmark is placed next to Enable the Free Trial and Launch [*]Malwarebytes' Anti-Malware, then click on finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Scan Now".
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click on Quanrantee All,.
• When disinfection is completed, a dialog will open and you may be prompted to Restart.(See Extra Note)
• Upon restart, launch Malwarebytes Antimalware and select History.
• Double click on the last scan done, then on Copy to Clipboard.
• Right click on your next reply and select Paste.
• Submit your reply.

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly.

Launch FRST and let it update. Run a scan and post the latest FRST.txt.