Matt200

SDFix: Version 1.208 Run by Administrator on Sat 07/26/2008 at 11:54 PM Microsoft Windows XP [Version 5.1.2600] Running From: C:\SDFix Checking Services : Restoring Default Security Values Restoring Default Hosts File Rebooting Checking Files : No Trojan Files Found Removing Temp Files ADS Check : Final Check : catchme…

Here is the Hijackthis Log StartupList report, 7/26/2008, 11:29:06 PM StartupList version: 1.52.2 Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE Detected: Windows XP SP2 (WinNT 5.01.2600) Detected: Internet Explorer v7.00 (7.00.6000.16674) * Using default options * Showing rarely important sections…

Hi Niels I have it now thanks. I will do this tonight and post the results. thank you Matt.

Hi Niels As you can see, I am not quite the boffin. I have found the folders (thanks for previous explination). But the your next process is a little unclear to me. You say "Now rename each file I mean removing the .vir entry." do you mean that I must delete the ".vir" extention for each f the files? Must i then archive…

Hi Niels If i go to click on start,my computer, i cant see QooBox,Quarantine ??? regards Matt

Hi There I ran Combofix and here is the log file. please advise. ComboFix 08-07-10.1 - user 2008-07-11 14:19:23.1 - FAT32x86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.573 [GMT -7:00] Running from: C:\Documents and Settings\user\Desktop\ComboFix.exe * Created a new restore point WARNING -THIS MACHINE DOES…

NIELS You are a true genius! Thank you for all your assistance! You have saved my bacon. I can get my files back. And I have opened the main ones and re-saved them. Brilliant!! All I now need is to fix the Virus on my PC. I see you are assisting me with that thread also. I feel so confident now! Regards Matt

Hi Niels The flash disinfector didnt work. When I use the PC Inspector and I Change the cluster setting I have recovered a few files. I will play around with it a bit. But I persistantly have to hit abort for it to advance. Is there an easier way? If Not, it doesnt matter. It seems I will get some of my plans off the disk.…

Hi Niels Something seemed to work. I can see the files i need to recover. What Next? i have been working any typing. I think something is being save. YAY!! Will let you know. thanks so long!

Hi Niels With pcinspector it sas the following : error no. 23 drv:129 LBA:281 BLOCKS:1 regards Matt

Hi Niels It says that the drive is not accessable. Matt

Hi Niels I will check when I get home tonight. But it almost seemed to just be a disclaimer, that read something lik " only a small percentage of computer survive the scan..... something like that. But I will confirm tonight. thanks Matt

Me Again Forgot to mention this (sorry). It says the the drive is not formatted when i try to access it directly! they may be a bad sector, although it was working fine before. I dont know much so please assist. regards Matt

Next time paste the full log file....it doesn have " \" in the file locations ! Download ComboFix from here: http://download.bleepingcomputer.com/sUBs/ComboFix.exe Then close all running programs, including web browser, instant messenger, etc and then run ComboFix. It will ask you whether it should start cleaning or not.…