Hi Richard,

-- What is the OS?
-- Are you posting from a clean computer?
-- Do you have a USB thumb drive?
-- Are you able to get a command prompt on ill machine?
(START > RUN > Type cmd > OK...

That is good news indeed! And, a very generous thank-you offer to boot!
Generally, I am happy if people "pay it forward" and do a good turn for somebody else in need. I figure that eventually it'll...

Finally! LOL! Lovin' that Vista!

See if you are able to install Adobe now - hopefully that will complete OK and then we can look at security again.

Typical busy Fall weekend upcoming - will...

AllRightyThen - On we go!

Let's try again to set up that reg key and see what happens:

Open another elevated command prompt and Copy&Paste

reg add...

OK - Either it wasn't extracted from the zip or it wasn't located properly.

Try extracting it to the desktop and then Copy and paste FixPerms.cmd into the C:\ProgramFiles\Windows Resource...

OK - Let's give this a whack at it:

-- Download the attached FixPerms.zip to your Desktop and Extract FixPerms.cmd from the ZIP to the folder where subinacl.exe was installed --->...

Good grief!

Please run the AVP Tool again.
-- Click the Manual Cure Tab
-- Click the Collect system information Button and let it run
-- When it finishes, it will say Completed. Report saved...

Well . . . That estimation was probably a bit low. I haven't priced XP recently, but I'd imagine you'll find it for significantly less than Vista or 7.

-- Let's have another try with MBAM. ...

LOL! . . . Macs have problems too :)

I've been unexpectedly busy this week (not that I'm complaining given the economy) so please bear with me.

-- For the registry issue, please download and...

I do not know how much of an exaggeration that is.....
It's that bloody UAC - Now, you did say you disabled this, but I want to double-check that.
Also, there are a couple programs we can try as...

No problem! We've all got "real lives" and they take precedence.....

This freaking Vista is really annoying.

-- Try running Regedit with an "elevated command prompt" and then try the...

This situation is a bit different :)

OK - Let's try this:

Open Registry Editor and RightClick on HKEY LOCAL MACHINE and select Permissions
Select Everyone and check the box to Allow Full Control and click APPLY
Click OK

Then...

Sorry for the delay - I guess I'm "in demand" these days LOL!

Let's try this:
Open a command prompt (start>run>type cmd)
At the prompt, copy&paste the following and hit ENTER each time:

reg...

OK - let me double-check some things & I'll get back to you.

PP :)

Bloody hell - it's probably a Vista thing . . .LOL.

-- Did you try RightClicking and running as Administrator?

Also, do the drill down with registry editor and check if MSFS key exists now. ...

Looks like there was an error copying atapi.sys to C:\

Can you navigate to C:\windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys

Copy and paste it to your C:\ drive -->...

Definitely get your OS disks (I'm assuming Windows disc and sony drivers)! They are good to have on hand and, given all that has been tried thus far, they may be necessary.
I'd still like to...

You HJT is out of date - go ahead and delete it.

-- Can you post your MBAM scanlog?

-- Please download DDS by sUBs (http://download.bleepingcomputer.com/sUBs/dds.scr) and save it to your...

Please do the following:

Download Malwarebytes' Anti-Malware (MBA-M) ( http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button) to your...

I am not clear as to what your problem is.

Let's go ahead and do this:
Please download Malwarebytes' Anti-Malware (MBA-M) (...

Well . . . That's not good.

-- Try this:
Get a command prompt (start > run > type cmd > OK\
Type or Copy&Paste ipconfig /flushdns at the prompt and hit ENTER.
See if that helps at all.

...

Neither do I . . . you could probably safely delete those if you want to do so.

Here are some observations:

-- If you installed and use Oovoo, you'll need to open MBAM and click the...

Did you see anything in the HJT or MBAM logs that warrants running Combofix?

I once had a poster tell me that a virus had turned his cursor into a dinosaur......LOL! Can't always take things at...

It is.

Update your MBAM to database version 2886 or later and you should have no more issues with this.

Cheers :)
PP

Ok . . . Try this:
Download Inherit.exe (http://download.bleepingcomputer.com/sUBs/MiniFixes/Inherit.exe) and put it on the Desktop. Now, drag the MBA-M installer into inherit.exe and wait for a...

No worries on the error message - just follow the steps below carefully and let me know how it shakes out.

Ok - Great . . . . Now the tricky part:

Please Download The Avenger v2 by Swandog46...

Happy to help :)

Let's do this next:

1) DELETE your current Win32kDiag and download a fresh copy to the Desktop.
• http://ad13.geekstogo.com/Win32kDiag.exe
-- Click START > RUN and then...

You're Welcome! :)

Ok - If you already have combofix on your machine, DELETE it.

Then follow the instructions in the link below to DL a fresh Combofix and run it:...

What happens when you try to run the tools?

PP :)

So sorry to be the bearer of bad news, but you have a nasty backdoor trojan with rootkit components.
This thing is far worse than Windows Police Pro - If you do any sort of online banking, there is...

To ALL posters with similar problem: PLEASE START A NEW THREAD for your problem.

It makes things much easier for the volunteers.

Thanks :)
PP

Hi Dave,

Please run MBA-M as per this linky and then post the log:

http://www.daniweb.com/forums/thread134865.html

PP:)

LOL!
Hey KL, that's an argument I'm NOT going to have with you ;)

Suffice it to say that I believe that msconfig is for "diagnostic" startup rather than as a "startup manager." Frankly, HJT is a...

@top10ufo:
I don't mean to demean your knowledge in any way shape or form - If I did, I apologize.

This is just not good advice, simply saying:


When you posted that, I kinda figured you...

NO! Bad advice! Do not disable System Restore until told to do so by someone who knows what they are doing.

Frankly, running combofix at this stage (and improperly at that) is not called for.

...

Oops! I am so used to writing that sentence in various forums that I didn't even think about that!
HJT would have to be installed on the infected drive. Also, there are a few other tools at our...

Hi Judy,

Got your message - suggest you run AboutBuster and see if it will remove those hidden streams.

http://www.malwarebytes.org/aboutbuster.php


Let me know if you have any problems...

Sounds like you have quite a mess there!

-- Are you able to run any tools in Safe Mode?

If you want, you could try this AT YOUR OWN RISK:
Run this early beta of a scanning tool I've been...