HELP WITH GRANDSONS E-MACHINE E525.. PLEASE !!!!!!!!!!!!!!!!!

[weg]

Hi everyone,i am new to these forums and desperate for some help..My grandsons E-MACHINE E525 is riddled with trojan horse viruses,plus adware,the viruses are stopping him from getting on line,its slowing the computer down to snail pace,and all of the system restore back-ups have mysteriously gone,when he got the computer about 15 months ago he did not make any back-up disks,so we cannott reset the laptop to the original factory settings,i have been in touch with the manufactor and explained everything,but they have not answered any of my E-Mails.He needs the laptop for his school work and one shop has said they would charge a minimum of 65 pounds just to look it over,its running Vista home basic,it boots up ok etc,but cannott get on line,also tried to install some software from a memory stick,maleware bytes,and spybot (etc)but once installed it will not run the software,i guess the viruses are stopping the running of this software,anyway cannott afford the repaire cost at this time,so would really appreciate anyone"s help with this problem..CHEERS !!!!!!!!!!!!!!!!!!!!!!!!!

[Jelly Bean]

Hello there...

 

Restart the machine and repeatedly tap F8 key and choose safe mode with networking from the list,now can he get online and do the installed software run?

 

You can order a recovery disk from E-Machine wich is a lot cheaper than £65.

 

I will pass you onto the Security/Malware guys for you and they can pop on and help you.

[Starbuck]

Hi weg

 

We'll sort this out for you .... and it won't cost £65. :)

 

If you can't access the internet from the infected system, please download these programs to a usb stick using a clean system and then transfer them.

Don't reboot the system between steps 1 and 2.

 

Step 1

Download RogueKiller and save it to your desktop.

• Close all the running processes
  
• Double click RogueKiller icon to run the program
  Vista/Win7 users should right click the icon and select Run as Administrator.
  
• When prompted, type 1 (SCAN) and then press Enter
  
• A report will open, please copy and paste this report in your next reply.

A copy of the RKreport.txt can be found on your desktop.

 

Note:

If RogueKiller is blocked, do not hesitate to try running it again.

If it still fails to run, right click on the downloaded icon and select 'Rename'.....rename it to winlogon and try again.

 

 

Step 2

• Download OTL to your desktop.
  right click on the link and select 'Save Link/Target As'.
   
  if you have problems, try this download link:
  OTL
  
• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  
• When the window appears, underneath Output at the top change it to Minimal Output.
  
• Check the boxes beside LOP Check and Purity Check

.

 

.

http://img.photobucket.com/albums/v708/starbuck50/new/Otllatest.png

Now copy the lines in bold below.
 
netsvcs
msconfig
%SYSTEMDRIVE%\*.*
%systemroot%\system32\Spool\prtprocs\w32x86\*.dll
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\*.exe /lockedfiles
%systemroot%\System32\config\*.sav
%PROGRAMFILES%\*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
CREATERESTOREPOINT
 
 

• right click in the Custom Scans/Fixes window (under the blue bar) and choose Paste.
   
  http://img.photobucket.com/albums/v708/starbuck50/new%20forum/scan-fix.png
  .
  
• Click the Run Scan button.
   
  http://img.photobucket.com/albums/v708/starbuck50/runscan.png
   
  
• Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them with your next reply.

 

 

In your next reply, please submit:

RogueKiller report

both reports from OTL

 

 

Thanks.

[weg]

STARBUCK,thanks for the quick response,it will be mid-week before i can attempt to follow your instructions,i will be in touch...Many thanks Weg........

[Starbuck]

Hi weg

 

it will be mid-week before i can attempt to follow your instructions

No problem, thanks for letting me know. http://fc07.deviantart.net/images3/i/2004/146/9/1/Two_thumbs_up.gif