My Anti Spyware

[12056]

Some of the infections that Dr. Web found are very serious, and if you do any online banking; I suggest you place watches on your account(s).
Some Backdoors, Rootkits, and Trojans aim to gather personal information.

I believe there is still more infections on your machine, please use the instruction at http://www.bleepingcomputer.com/combofix/how-to-use-combofix
To run a tool called ComboFix. The exe file can be downloaded from http://download.bleepingcomputer.com/sUBs/ComboFix.exe.

The above website will give you detailed step-by-step instructions...
Please post the log file in your next post.

[varun.tyagi]

I tried to run combofix. It runs and scans successfully but when it restarts my computer it says that i must activate my windows to proceed further. When i click on yes, nothing happens and the same old story is repeated . What should i do now my friend??

P.S.: Just to add to it I use genuine windows

[12056]

I tried to run combofix. It runs and scans successfully but when it restarts my computer it says that i must activate my windows to proceed further. When i click on yes, nothing happens and the same old story is repeated . What should i do now my friend??

P.S.: Just to add to it I use genuine windows

Very strange, I have never seen this happen before... Was there a log file?
Maybe it quarantined something that it wasn't supposed to.

Can you do a System Restore, go back to a date before running ComboFix.

I'm really sorry that you are having problem.d

[varun.tyagi]

No, there wasn't any log file created during combofix scanning. However, I have done the system restore part. I am attaching the log file that was created after doing system restore. I don't think there is any concrete stuff in this file.
I tried it twice and got the same result. I might be missing out on something

Don't say sorry buddy....you are only trying to help me out....lets do it as a team . Both of us have lots to learn from it.

[12056]

Nothing useful in the log, just like you suggested.
How's your machine, does is still want you to activate it (Windows)?
Did System Restore fix your problem?

[varun.tyagi]

Yeah....system restore has solved my problem of activation...I have also checked it with microsoft, if my windows is genuine or counterfeit. It confirmed it as genuine and activated
I wonder if the problem is due to the download of Windows recovery console.
Should i try to run combofix without installing windows recovery console?We might get a log file though?

What do you suggest?

[varun.tyagi]

one more thing pal...now i am not able to restart my windows in a normal mode. However before encountering this problem i was able to get combofix log file somehow. I am attaching it with the post.

I think i have to resort to the last thing i wanted and that is to reinstall windows.

Waiting for your reply.....

[12056]

I'm going to ask Patric (the site admin) for his advice.

[patrik]

Hello.

now i am not able to restart my windows in a normal mode

Only Normal mode is broken ? Safe modes are ok ?

What shows your PC when your trying boot your computer in Normal mode ?

[varun.tyagi]

Hello Patrik,

Yeah the safe mode is ok....but only through administrator. However if i try to log in as a user then it asks me the same old thing of windows activation...
I also tried to do system restore but still no luck....When i try to open windows through normal mode it does not start and brings me back to the same window in which it gives me different options of starting windows...

[patrik]

Please download OTL from here.
* Save it to your desktop.
* Double click on the icon on your desktop.
* Click the "Scan All Users" checkbox.
* Under the Custom Scan box paste this in

netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
imm32.dll
nvstor32.sys
ahcix86s.sys
nvrd32.sys
rdpcdd.sys
netbt.sys
ndis.sys
ftdisk.sys
winlogon.exe
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT

* Push the "Run Scan" button.
* The scan should take just a few minutes.
* Two reports will open (OTL.txt and Extra.txt).

Post back with both OTL logs. Post each log in separate post.

[varun.tyagi]

Hi Patrik,

Please find attached the OTL log

[varun.tyagi]

Here comes the Extra.txt

[patrik]

Looks like a few important system files are infected.
You have a Windows installation disk ?

[varun.tyagi]

Nopes.....I have lost the disk but i had once saved the product key in my lappie, it must b there.....is it possible to get someone else's windows installation disk and use my genuine product key?
I can arrange one for sure