I need help with a virus i think

Fantastic job.

Try to do that line again then continue to the below part.

I will be studying these while you do the rest.

Bob

 

sorry my mother called......

ok i tried line 4 again and it is saying it is not recognized as an internal or external command operable program or batch file

I am going to now continue with the rest you said to do as i await what to do about the tasklist

 

ok i ran the arovax and cleaned somestuff out but 3 of the things it found it says unknown and when i went to clean it it opened a box saying this file is unknown and could cause damage to your computer sop should i clean it anyways????
I am now moving onto the next step

 

After completeing all the other steps rerun Arovax and get me the names.

Do this before going to safe mode and testing the ones that lock up.

And give me the names of any that the rest find that you are not sure of.

Edit: on the Kaspersky run each of the scans with My Computer last!

Bob

 

i was in the middle of running the bit defender when my computer crashed.i just got back online off to scan the arovax again

 

the first one just says UNKNOWN
second UNKNOWN AIM6 crogram files\aim6\aim6.exe
third UNKNOWN MYSPACEIM crogram files\myspace\im\myspaceim.exe

 

The first unknown leave for now.

the others are related to AOL messenger and My Space instant messenger so if you use these then leave them alone.

if you do not use them then uninstall them in control panel Ad/Remove programs.

did you do the tasklist that failed again and did it come up blank again?

What other results are you having?

Bob

 

sorry my cable went out for a few minutes so i got knocked off..off to get my baby to bed then ill be back to work on everything Thanks!!!

 

I was running the kaspersky when my computer crashed again grrrrr i'm going to try it again now

 

Kaspersky has 4 different scans with the big one being My Computer.

Which one crashed.

If one crashes skip it and do the next kaspersky scan.

Run what will run and continue on.

And what about the Tasklist?

Bob

 

OK sorry I reread the last page and see where you tried the Tasklist again.

try pasting this line

c:\windows\system32\cmd.exe /c c:\windows\system32\tasklist.exe /svc > "%USERPROFILE% "\Desktop\Tasklist.txt

Bob

 

the tasklist is still not working it is giving me the same message..
kaspersky crashed when i tried critical areas and my computer it completed email and memory.....

 

Ok

sounds like tasklist.exe is missing

try this to see if it is missing

start-run
type
cmd
enter
in the command window
type
tasklist
enter

if it runs let me know

Now

Lets check for a Rootkt

downlaod Catcheme
http://www.gmer.net/catchme.exe

run it and post back the log.

Bob

 

This is for after you have done all the above that will run.

Download EndItAll http://www.compu-docs.com/Downloads/enditall.exe

Run enditall click enditall bottom left corner
close enditall


Download and install Killprocess
http://orangelampsoftware.com/products_killprocess.shtml
get Killprocess 241

On the download page is a "Download Kill lists" select that then the one that says "Clean Windows XP ". You may have to rt click this and do Save As.
When you have it and have installed KillProcess move this file to inside the KillProcess folder. Which should be C:\Program Files\Killprocess.

Instructions for use.
Run KillProcess then click File-Load Kill List, browse to the KillProcess folder and choose "Clean XP.lst ".

Then back to File, then Execute Kill list.

Answer yes to all.

exit Kill process

Now try only the programs that failed. But if it locks up again and you reboot you must run Enditall and Killprocess again before trying the next program.

Bob

 

ok for the tasklist same message still

catchme scan completed everything reads 0

 

OK tasklist.exe is missing.

DL it here
http://www.computerhope.com/download/winxp/tasklist.exe

cut it and paste it to c:\windows\system32

now do the original tasklist operation.

and fill me in on the results of what you are doing.

I think we are close.

I am going to post the process to find and remove RegistryBooster in my next post.

Just do what you can to follow the steps.

Bob

You are doing a great job. I know you must be exasperated. But sometimes it takes this kind of effort. I will stick with you untill you say UNCLE!

 

omg avg spyware completed the fast scan!!!!!!! only had cookies picked up i am going to try the full scan after doing your above instructions!!!!

 

ok i did the above....it is still giving me the same message when i paste that into the command bar

 

OK

that is a mystery that needs solving

continue on all the rest
but when you get time

start-run
type cmd
enter
command window opens
type
cd\windows\system32
enter
type
dir tasklist.exe
enter
if it finds it
type (or paste fron here)
tasklist.exe /svc > "%USERPROFILE% "\Desktop\Tasklist.txt

While in the command window if the above worked or not
type (or paste fron here)
attrib c:\registrybooster.* > "%USERPROFILE% "\Desktop\rboost.txt
close the command window and post the contents of rboost.txt. (should be icon on desktop).

Bob

I will be away for about 1 hour.

 

it did not find the tasklist again

results of rboost
File not found - C:\registrybooster.*