Hello My daughter's laptop is virtually unusable as a result of this - Virtumond (I guess) has taken over almost all the computer. IE and google chrome will not start, but firefox is still working. Other programs will not run as the system says the files are infected. The ERUNT and DDS files would not be transferred to the desktop when downloaded so I copied them from another machine. However neither would run - ERUNT flashed a couple of installation screens then nothing happened.

Lost: Via Domus All Discussions Screenshots Artwork Broadcasts Videos News Guides Reviews All Discussions Screenshots Artwork Broadcasts Videos News Guides Reviews.

Running DDS produced a fake virus warning and nothing happened. I hope you can help.

My daughter goes back to Uni sometime next week so I hope we can get it sorted before then! Please read While best efforts are made to assist in removing infections safely, unexpected stuff can happen. It is advisable that you back up your important data before starting any clean up procedure. Neither Safer Networking Forums nor the Analyst providing the advice may be held responsible for any loss.

RKill Please download and run the following tool to help allow other programs to run. (Thanks to Grinler of BleepingComputer.com) • • There are 4 different versions. If one of them won't run then download and try to run the other one. • Vista and Win7 users need to right click and choose Run as Admin • You only need to get one of them to run, not all of them. • You will know one ran when a box opens up with a report Please download Malwarebytes from or • Double-click mbam-setup.exe and follow the prompts to install the program. • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. • If an update is found, it will download and install the latest version.

• Once the program has loaded, select Perform quick scan, then click Scan. • When the scan is complete, click OK, then Show Results to view the results. • Be sure that everything is checked, and click Remove Selected. • When completed, a log will open in Notepad.

Please save it to a convenient location and post the results. • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot. Post the report please. You had some nasty stuff on this system that MBAM removed, I am sure there is more.

Be sure to follow these instructions to save this program to your desktop and rename it, I am seeing markers for a possible rootkit and it may try to prevent CF from running. Download Combofix from any of the links below. You must rename it before saving it. Save it to your desktop. * IMPORTANT!!!

Save ComboFix.exe to your Desktop • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools • See this for programs that need to be disabled and instruction on how to disable them. • Remember to re-enable them when we're done. • Double click on ComboFix.exe & follow the prompts.

• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal.

Bloomberg. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware. • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console. **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Hi, A couple of things to go over. Limewire Any form of P2P (File Sharing ) is dangerous, this is most likely how this system got infected. Your downloading that file from an unknown source, malware writers are in tune to this and have made this the latest way of infecting your computer.

Personally I would never allow any form of programs like this on any of my systems. Ask Toolbar * It promotes its toolbars on sites targeted at kids.

* It promotes its toolbars through ads that appear to be part of other companies' sites. * It promotes its toolbars through other companies' spyware.

* It is Installed without any disclosure whatsoever and without any consent from the user whatsoever. * It solicits installations via 'deceptive door openers' that do not accurately describe the offer; failing to affirmatively show a license agreement; linking to a EULA via an off-screen link. * It makes confusing changes to user's browsers - increasing Ask's revenues while taking users to pages they didn't intend to visit.