Computer cleaned (?) but Control Panel still inaccessible

[jholland1964]

All looks good to me. I would also recommend, if I have not earlier that you install SpywareBlaster that PP links to, notes and explains in this thread
Happy all is running well and glad we could provide needed help!
Judy

[PhilliePhan]

Happy all is running well and glad we could provide needed help!

X2

-- I would like you to reinstall your resident AV, though. It was infected by the new Vundo and I am not sure if you and Judy cleaned it or not - have not had a lot of time to pore over scanlogs these days. Some logs show it, some do not.

Better yet, download RenV.exe to your Desktop and run it from the Desktop.

http://download.bleepingcomputer.com/sUBs/Beta/RenV.exe

Please attach that log for me, just to be on the safe side...

PP

[Tirhakah]

Ok, doesn't look very informative, but here it is:

[PhilliePhan]

Ok, doesn't look very informative, but here it is:

Well . . . That's odd. It just seems to have disappeared. There were a number of things in the first combofix log that I thought you and Judy cleaned, but going back over the thread, I do not see those steps. Curiouser and curiouser

If you don't mind, I'd like to see one last ComboFix log at your leisure. Download a new version and keep it on the desktop after the scan in case we need to use it to remove additional baddies.

Cheers
PP

[Tirhakah]

Here's the log. Still includes some 'reg load points' for files that don't exist (I checked), and the scheduled tasks seem to be far greater in number than they used to be...

[PhilliePhan]

Here's the log. Still includes some 'reg load points' for files that don't exist (I checked), and the scheduled tasks seem to be far greater in number than they used to be...

Yup - There is a bunch of stuff we missed. Sorry about that.


Let's do this:

-- Download the attached file CFScript.txt to your Desktop
-- Close ALL browser windows and then drag CFScript.txt into ComboFix.exe



-- Let Combofix run as before and post me that log along with a fresh HJT Log.

And . . . We'll go from there
PP

[Tirhakah]

Done the scan with the dragging as shown. Actually, done it twice, since when I returned to the computer the first time it appeared to have crashed (no icons/menubar) and so I wasn't sure it had managed to complete the scan. Here are the logs: