SAS & MBAM will not run

[elementality799]

hey there

i did all of the steps in your 8 steps post.

however after downloading super anti-spyware and malwarebytes, neither would not open (i also tried redownloading both, SAS would get an error and malwarebytes just would open at all)

i was able to run the hijackthis so i have attached the log for that, but im stuck with the other two.

please help!

- - -

also, im not sure if it helps but the infection i have on my comp redirects google links, i have gotten this once before and know that it then 'evolves' and gets much worse ---- desktop background changes telling you your computer is infected, and then you are spammed with pop ups to download a false antivirus program and over all your internet browser and most programs become unusable.
(i ended up having to format my computer in the end, i was able to get rid of the virus after hours of manually making changes/deleting files but i made a VERY stupid mistake and messed up my OS)

 

[touch]

Hello elementality799

You have 3 antivirus programs running. "Having more than one antivirus program active will provide less protection.
Not more."
Remove/uninstall from "add/remove programs" in controlpanel:
AVG8 and Avast or Avira

Also remove viewpoint

Reboot.


Download malwarebyte
http://www.download.com/Malwarebyte...4-10804572.html?tag=mncol;pop&cdlPid=10878968

Save the file as setup.exe

Run the setup.exe file
When it gets to the final step of the installation it will seem like it froze....it hasn't but it will take anywhere from 15mins to an hour to get through that step so just let it do its thing.
If automatic update fail, download and install the manual update ->
http://www.gt500.org/malwarebytes/mbam-rules.exe

Go into the Malware folder in through Program Files
Rename the mbam.exe to 123.exe and run it.
Do a full computer scan
Check all and remove/fix/delete them.

Restart your computer and post the log

 

[elementality799]

hi touch

well i ran the scan and then realized i had forgotten to update it fist so did that and then ran it again, ive attached both logs (the updated scan log is the one that ends in 'second')

 

[touch]

Ok. However, I think you have more infections, I´ll therefore suggest you post a combolog ->


Please download Combofix:
http://subs.geekstogo.com/ComboFix.exe

And save to the desktop.

Close all other browser windows.

Please connect all your external hard drive/flash drive before running Combofix, if you have any


Double-click on the combofix icon found on your desktop.

Please note, that once you start combofix you should not click anywhere on the combofix window as it can cause the program to stall. In fact, when combofix is running, do not touch your computer at all and just take a break as it may take a while for it to complete.

Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post

 

[elementality799]

ok, here is the combofix log

 

[touch]

Delete this file:
c:\windows\system32\drivers\zdqnqsn.sys

It is possible you´ll have to do it from safe mode.

Reboot, attach new hijackthis log and tell how things are running ?

 

[elementality799]

things are running much better

thank you so much for all of your help touch

 

[touch]

That´s good to hear

If you don´t know this:
O4 - Startup: santa.bat

Have hijackthis to fix it. That´s all.

Now your computer problems are solved, it is time for the clean-up procedure
You should Create a New Restore Point to prevent possible reinfection from an old one.
The easiest and safest way to do this is:
Go to Start > All Programs > Accessories > System Tools > System Restore
Select Create a restore point, and Ok it.
Next, go to Start > Run and type in cleanmgr
Select the More options tab
Choose the option to clean up system restore and OK it.

This will remove all restore points except the new one you just created.

Please download OTCleanIt
Save it to desktop.
This will remove all the tools we used to clean your computer.
Double-click OTCleanIt.exe. Click CleanUp. Say Yes to the "Begin cleanup Process?"
When asked if you want to proceed with the cleanup process, click Yes. Restart your computer when prompted.
Please note. It will NOT remove Mbam, Ccleaner and SuperAntispyware.

To learn more about how to protect yourself while on the internet, please read Tony Klein´s guide:
How did I get infected in the first place

 

[elementality799]

ok i did everything you said

so am i all done now?

 

[touch]

Yes, you´re done

 

[elementality799]

thanks for everything touch =)

 

[touch]

I was glad to help