I cannot restore.

[TH40229]

First, I want you to flush the DNS Cache and restore MS's Hosts file. To do this...
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop.
Double click on the flush.bat file to run it.Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.

After rebooting Download Combofix from any of the links below, and save it to your desktop.<--Important
Link 1
Link 2
Link 3

Click on this link Here to see a list of programs that should be disabled.
The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
Next: Disconnect from the internet. If you are on Cable or DSL, unplug your computer from the modem.
Next: Please disable all onboard security programs (all running with back ground protection) as it may hinder the scanner from working.
This includes Antivirus, Firewall, and any Spyware scanners that run in the background.

• Double click combofix.exe and follow the prompts.
• When finished, it will produce a log for you. Post that log in your next reply

Note: Do not mouseclick combofix's window while its running. That may cause it to stall
Please be patient while the scan runs, at times it may appear to stall.
When finished and after reboot (in case it asks to reboot), it should open a log, combofix.txt.
Post this log in your next reply
After rebooting ensure your Security applications have been re-enabled.

In your next reply post:
ComboFix.txt
***A guide and tutorial on "How to use Combofix" can be found here:
A guide and tutorial on using ComboFix

Ok before I start do I boot the counter up into safe mode with networking and what steps do I need to take for disabling my anti-virus?

 

[Jacee]

Ok before I start *do I boot the counter up into safe mode with networking* and what steps do I need to take for disabling my anti-virus?

Click on this link Here to see a list of programs that should be disabled (and how).

If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
Next: Disconnect from the internet. If you are on Cable or DSL, unplug your computer from the modem.

Do not run in 'safe mode with networking'

 

[TH40229]

Sorry I meant computer instead of counter. So I boot up normally without being connected to the internet? Sorry I'm just making sure I have this down before I start the process. Are u normally on here throughout the week? I don't wanna get started an get stuck without any help.

 

[Yard Dog]

Ok before I start *do I boot the counter up into safe mode with networking* and what steps do I need to take for disabling my anti-virus?

Click on this link Here to see a list of programs that should be disabled (and how).

If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
Next: Disconnect from the internet. If you are on Cable or DSL, unplug your computer from the modem.

Do not run in 'safe mode with networking'

She has indicated for you to not run safe mode with networking, which would be safe mode without networking.
Hope this helps clear this up.

She teaches and participates in numerous forums, but, she checks in as she is able. Please continue with her instructions.

 

[Jacee]

***A guide and tutorial on "How to use Combofix" can be found here:
A guide and tutorial on using ComboFix

 

[TH40229]

My docs and photos are safe right? I don't need to transfer them to an external hdd?

 

[TH40229]

Ok I completed the first step. My computer rebooted but when it rebooted it booted up normally. Do I need to power down then boot up in safe mode with networking to download one of the three combofix files?

 

[TH40229]

I went ahead and powered down because it wouldn't let me open up internet explorer anyway. I did get the flush completed though. When I boot back up I'm going to boot up into safe mode with networking until I get one of the three links downloaded for combofix. Is that correct?

 

[Jacee]

You can do that if it works for you, but you could also use a "clean flash drive" to download Combofix .

Also do this... Disable the proxy settings in Internet Explorer:
1) Under “Tools” in the browser tool bar select “Internet Options”.
2) In the “Internet Options” window that pops up, click the “Connections” tab at the top.
3) Click “LAN Settings” near the bottom of the “Connections” section.
4) If the “Proxy server” checkbox is marked with a check, click it to deselect/uncheck it.
5) Click “Ok” to close the “Local Area Network (LAN) Settings” window.
6) Click “Ok” to close the “Internet Options” window.
Reboot
Make sure "Proxy server" is still disabled under your LAN Settings.
Test whether internet connectivity is restored.

 

[TH40229]

Ok I will do that. My docs and photos won't get deleted will they?

 

[TH40229]

You can do that if it works for you, but you could also use a "clean flash drive" to download Combofix .

Also do this... Disable the proxy settings in Internet Explorer:
1) Under “Tools” in the browser tool bar select “Internet Options”.
2) In the “Internet Options” window that pops up, click the “Connections” tab at the top.
3) Click “LAN Settings” near the bottom of the “Connections” section.
4) If the “Proxy server” checkbox is marked with a check, click it to deselect/uncheck it.
5) Click “Ok” to close the “Local Area Network (LAN) Settings” window.
6) Click “Ok” to close the “Internet Options” window.
Reboot
Make sure "Proxy server" is still disabled under your LAN Settings.
Test whether internet connectivity is restored.

What does disabling the proxy setting do?

 

[Yard Dog]

Viruses will change settings , if you set Internet Options as suggested , you should be able to connect to the internet. Double check and ensure they are as Jacee instructed .

 

[TH40229]

Combofix won't delete my docs and photos right? I'm sorry in just paranoid.

 

[Jacee]

Combofix won't delete my docs and photos right? I'm sorry in just paranoid.

No, not unless one of them is infected.

 

[TH40229]

I started to run combofix but got a pop up that said my webroot antivirus is interfering with combofix. I didn't see webroot is the list of programs to disable and there isn't any webroot icons in the lower right window by the clock. How do I disable webroot? I'm currently booted up into safe mode with networking.

 

[TH40229]

Should I just go ahead and uninstall it since the subscription has ran out anyway?

 

[Jacee]

First ... before uninstalling Webroot, download and install Microsoft Security Essentials. Microsoft Security Essentials - Free Antivirus for Windows
It will want to update definitions and run a scan, with might take a while.
I want you to have Antivirus protection on your computer!

After all that is done, You can uninstall Webroot. Once the uninstall process has finished, restart your computer.

 

[Jacee]

Tell me why you're booted up into safe mode with networking.

 

[TH40229]

Tell me why you're booted up into safe mode with networking.

When I boot up normally I get the virus warning pop ups. I had to boot up in safe mode with networking to download one of the three link you provided for combofix. Once I got it downloaded I was going to unplug from the Internet like the instructions said. Am I doing this correctly?

I'm so scared and confused lol. I just hope I don't lose my pictures. The pictures are really important to me. I did back some up to my external hdd awhile back but don't have the ones of my daughters room backed up What if I booted up in safe mode without networking? Could I possibly get the pictures to the external hdd that way as long as they aren't infected? Then again could I spread the virus even more by opening up the pictures folder?

 

[Jacee]

I had to boot up in safe mode with networking to download one of the three link you provided for combofix. Once I got it downloaded I was going to unplug from the Internet like the instructions said. Am I doing this correctly?

Yes, this is correct.
Chances are that your picture are safe .... Combofix won't delete them, plus there is 'backup' just in case you need to restore an item.

Do you have any CD's that you can copy your picture to? I save all my pictures on CD's ... that way I know they're safe.