Okay, a summary
Asked but not answered: What site did you use for this?
c:\Users\CHINA\download\installer_adobe_acrobat_7_0_professional_7_0_english.exe
PUP.
SmsPay.PGen) This is not from the Adobe site.
---------------------------------
What you've done:
1. Mbam scan deletes some malware
2. DDS freeze in middle>
3. Ran Safe Mode> Proxy> Tdss (clean)> Rkill> Still no DDS
4. Full mbam> some malware
5. HJT + fix
6. Combofix hangs,
7. Eset, then OTM
8. CK scan (clean)
9. OTL
10. OTL fix won't run.
===============================================
Reboot the Computer
Describe current problems you are having
=============================================
Revamping:
2. DDS:
Please download this file:
xp_scr_fix
Unpack (unzip) the file onto your desktop and double-click it. You will be asked if you wish to merge the file with you registry, say Yes.
You should then be able to run DDS.scr. It's the .scr file extension causing the problem.
======================================
6.
NOTE: If, for some reason, Combofix refuses to run, try one of the following:
1. Run Combofix from Safe Mode.
2. Delete Combofix file, download fresh one, but
rename combofix.exe to
friday.exe BEFORE saving it to your desktop.
Do NOT run it yet.
-------------------------------------
[Remove the RKill you have now. Download new>>
Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.
There are 4 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.
- Rkill.com
- Rkill.scr
- Rkill.pif
- Rkill.exe
- Double-click on the Rkill desktop icon to run the tool.
- If using Vista or Windows 7 right-click on it and choose Run As Administrator.
- A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
- If not, delete the file, then download and use the one provided in Link 2.
- If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
- Do not reboot until instructed.
- If the tool does not run from any of the links provided, please let me know.
Once you've gotten one of them to run then try to immediately run the following>>>>.
Please download
exeHelper by Raktor and save it to your desktop.
- Double-click on exeHelper.com or exeHelper.scr to run the fix tool.
- A black window should pop up, press any key to close once the fix is completed.
- A log file called exehelperlog.txt will be created and should open at the end of the scan)
- A copy of that log will also be saved in the directory where you ran exeHelper.com
- Copy and paste the contents of exehelperlog.txt in your next reply.
Note: If the window shows a message that says "Error deleting file", please re-run the tool again before posting a log and then post the two logs together (they both will be in the one file).
Rkill instructions
Once you've gotten one of them to run
- immediately double click on friday.exe to run
- If normal mode still doesn't work, run BOTH tools from safe mode.
If you have done #2, please post BOTH logs, rKill and Combofix.
Note: Do not reboot after running the above scans> go right on to Combofix
Note 2: If Combofix says 'expired', click on the Refresh button in the toolbar.
