Completed 8 steps please help

[bob689]

I had constant bad image errors. Following the steps cleared it up. Internet still slow. Sending all of my reports. Thanks in advance for all the help.

Bob.

 

[mflynn]

MBAM is clear.

SAS need to be run again as it had found/removed items therefore could find more.

ONLY after SAS is run and log attached do the below!

Download SDFix to Desktop.

http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

On Desktop run SDdFix It will run (install) then close.

Then reboot into Safe Mode

As the computer starts up, tap the F8 key several times.

On the Boot menu Choose Safe Mode.

Click thu all the prompts to get to desktop.

At Desktop
My Computer C: drive. Double-click to open.

Look for a folder called SD Fix. Double-click to enter SD Fix.

Double-click to RunThis.bat. Type Y to begin.

SD Fix does its job.

When prompted hit the enter key to restart the computer

Your computer will reboot.

On normal restart the Fixtool will run again and complete the removal process then say Finished,
Hit the Enter key to end the script and load your desktop icons.

Once the desktop is up, the SDFix report will open on screen and also be saved to the SDFix folder as Report.txt.
Attach the Report.txt file to your next post.
=========================================
Download ComboFix

NOTE: If you have had ComboFix more than a few days old delete and re-download.

Get it here: https://www.techspot.com/downloads/5587-combofix.html
Or here: http://subs.geekstogo.com/ComboFix.exe

Double click combofix.exe follow the prompts.

Install Recovery Console if connected to the Internet!

When finished, it will open a log.
Attach the log and a new HJT log in your next reply.

Note: Do not click combofix's window while its running. That may cause it to stall.

Mike

 

[bob689]

The new logs

it seems that every time i restarted new trojans would download. i ran sas 3 times and it kept finding the same suff. I disconnected from the internet and it finally stayed clean. Here are the new logs.

 

[mflynn]

From Safe Mode!

Run SAS attach log.

ComboFix again attach log

Last SDFix post log

Mike

 

[bob689]

new reports

Sorry I thought i only had to run sd fix in safe mode. Here are the reports run in safe mode. The sd fix is now report2. it will not let me upload same file to same thread.
Thanks

 

[mflynn]

Normally you are correct but because of the first runs I felt we needed it from Safe Mode.

You have some bad ones.

Run both again to confirm they can find no more or have the same confirming they can not clean them.

Mike

 

[bob689]

Here are the new reports. sas and sd fix look to have come back clean.
Bob

 

[mflynn]

OK Bob you have some nasties that all of these are not cleaning.

Go here Download DrWeb https://www.techspot.com/vb/post724044-3.html

Boot to Safe Mode only! Not with Networking.

DrWeb will fisrt do and Express Scan on its own when it completes then do a full scan.

The first Virus it finds select Cure and do the same for all the rest.

This will take hours (based on cpu speed,,hd speed and size and number of files) but is your best chance at this point! better take the time to do it!

Mike

 

[bob689]

Ran dr web. Found a few items. Ran the two reports again after. Hope it helps.

Thanks
Bob