[Resolved K] Full-sized windows are popping open by themselves....

[kevinf80]

Stay in safe mode with networking, delete Combofix from your Desktop. Download a fresh copy from the following link

Combofix  Save this direct to your Desktop, do not re-name it.

Run as you did previously, if Combofix re-boots the system be on hand to force back to safe mode with networking....

Let me see the log if successful...

[RichieAnything]

Combofix ran successfully in safe mode with networking..  I had to uninstall my TREND MICRO anti virus..  I AM CURRENTLY RUNNING WITHOUT ANTIVIRUS.

1.  Where do I find the text file that was made by COMBOFIX that I am supposed to post?

2.  Can you recommend a free antivirus to install on my computer instead of TREND MICRO..  BECAUSE- trend micro expires in a month anyway....
Do you have a link to free antivirus?

[kevinf80]

The log from Combofix is here C:\Combofix.txt.

To keep safe when online you need a good Antivirus/Antspyware/Antimalware/Anti-Rootkit combination application. Microsoft Security Essentials covers all of those bases, but better still it is free. Go Here and hit the "Download it free today" tab, follow the prompts. Once installed it will want to update and carry out a quick scan, allow that to happen.
Go Here for information that will show you how to install and use MSE.

[RichieAnything]

I cannot find the file C:\Combofix.txt.

[kevinf80]

Please download SystemLook from one of the links below and save it to your Desktop.
 Link 1
Link 2

• Double-click SystemLook.exe to run it.
  
• Copy the content of the following codebox into the main textfield:
  
  

Code: [Select]

:filefind
Combofix.txt


• Click the Look button to start the scan.
  
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

[RichieAnything]

SystemLook 30.07.11 by jpshortstuff
Log created at 20:15 on 03/10/2011 by Deloris
Administrator - Elevation successful

========== filefind ==========

Searching for "Combofix.txt"
C:\ComboFix\ComboFix.txt   --a---- 431 bytes   [19:23 03/10/2011]   [20:18 03/10/2011] 3DC29F5ACDEF1E5F41F8960FD29BD3D8

-= EOF =-

[kevinf80]

Can you post that log:

C:\ComboFix\ComboFix.txt

[RichieAnything]

ComboFix 11-10-03.01 - Deloris 10/03/2011  15:23:05.4.2 - x64 NETWORK
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.1.1033.18.3835.2976 [GMT -4:00]
Running from: C:\Users\Richie\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Created a new restore point


(((((((((((((((((((((((((   Files Created from 2011-09-03 to 2011-10-03  )))))))))))))))))))))))))))))))

[kevinf80]

That log is not complete and is actually from the fourth run of Combofix, I need to see the other logs from the other CF scans, they will be here C:\Qoobox\ and will be in a format such as follows:

C:\qoobox\ComboFix2.txt 2011-10-03 17:07:26
C:\qoobox\ComboFix3.txt 2011-10-03 16:42:53
C:\qoobox\ComboFix4.txt 2011-10-03 15:56:10

The above are listed as examples and dates/times will differ slightly in yours. The higher the number the earlier the scan, in the above example Combofix4.txt is from the first run of CF as can be see from the time. Therefore let me see the scans you have done in reverse order, higher number first.
Also let me see this log if it exists C:\Qoobox\ComboFix-quarantined-files.txt

Kevin

[RichieAnything]

I cannot locate any of the files that you have asked for...     COMBOFIX did not run properly...all of the times that I tried to run....

I ran COMBOFIX 3 times and always got stuck on a flashing number of small windows that I had to stop manually..   
the first time that I ran COMBOFIX, I allowed the windows to keep flashing all night long..  I thought it was running properly, but in the morning-I had to manually shut the program down..  IT HAD RAN ALL NIGHT...

[kevinf80]

OK, do the following :-

Please download OTH to your desktop
Please download OTL  to your desktop
Please download the attached file Scan.txt to your desktop

Double click the OTH file to run it and click Kill All Processes, your desktop will go blank.



Then select Start OTL. OTL will now run

• Double-click on the Custom Scans box and a message box will popup asking if you want to load a custom scan from a file
  Select Scan.txt that you downloaded
  
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    
• Click the Internet Explorer button, post these logs in your  reply….
  

[RichieAnything]

I downloaded oth and otl to my desktop..     but wat does this mean---Please download the attached file Scan.txt to your desktop?

[RichieAnything]

nevermind last post..   I found the attached file...

[RichieAnything]

My desktop did not go blank..   I ran the otl scan anyway..   FWI   I am using google chrome...

[kevinf80]

That is very odd, when the "Kill all processes" tab is selected the app is designed to do that "Kill all processes" that would include any malware that is interfering with our tools.
Lets see what the logs show....