By the way, thank you for your help on this one. I've spent the last week or so trialling various bits of software to help prevent this kind of...
Hi followed the instructions and now have a new folder in docs and settings for a Boss.BOSS.000, and no change to the settings I was experiencing...
here we go ! REG.EXE VERSION 3.0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows...
So should I be logged in as 'Boss' or another admin account when I do this? And can I presume it's OK to switch users as long as the boss account...
Yes to both :)
heres the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-917563655-598665437-3809949608-1006 Cheers
Thanks :-) Here's the result>> DefaultUserProfile REG_SZ Default User AllUsersProfile REG_SZ All Users ProfileImagePath REG_EXPAND_SZ...
Done. My PC seems OK with regard to the Web, links and google etc. My preferences seem to have been hijacked along the way though - when I log in...
This one is a fresh scan with MBAM, although just a quick scan - >> Malwarebytes' Anti-Malware 1.30 Database version: 1306 Windows 5.1.2600...
Thanks :-) Heres the Kaspersky logfile, although it was done earlier today prior to a Malwarebytes & Spyware Doctor scan which each deleted...
did it again this time I paid attention - the word 'context' flashed in, then ads.infinisource.com and a blank screen
Sorry - another add - when I post here I now get Firefox hanging with a blank screen but the windowsbbs address still in the titlebar, with a note...
Can I presume maybe my PC is OK now? I'll do another RSIT scan and attach the logfile, I just don't want to go anywhere sensitive online before I...
Dave - also have a Mawarebytes logfile if you want to see it, it found some nasties which I deleted. Now running the online scan from Kaspersky...
Dave - thanks for reminding me about filename changes, this one worked. Have rebooted and have malwarebytes running a scan now also. Heres the...
OK - that didn't work either. I was able to download Combofix to a CD then to my damaged PC's desktop in safemode. However it behaves the same as...
Yeah, my laptop and a CD burner. Trying that now :-)
Dave - thanks for the response. I should have said I had tried this also sorry. I am unable to get to any bleepingcomputer pages, even in...
RSIT file # 2 Here's the other file produced by RSIT in normal mode earlier today. The logfile above was done in safemode. Did I say thanks in...
[Resolved] Browser & google hijack and AV/Malware disabled Hi... as with other users, I have managed to get my PC infected. Result/current...
Separate names with a comma.