Startup: C:\Users\Don\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\615\G2AWinLogon_圆4.dll (Citrix Online, a division of Citrix Systems, Inc.) HKLM-x32\.\runonceex: c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\ContentMerger10.exe (Sonic Solutions) HKLM\.\RunOnce: C:\Windows\system32\rstrui.exe /RUNONCE (Microsoft Corporation) HKU\Don\.\Run: "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background (Microsoft Corporation) HKLM-x32\.\Run: "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" (Sun Microsystems, Inc.) HKLM-x32\.\Run: "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" (Adobe Systems Incorporated) HKLM-x32\.\Run: "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices (Microsoft Corporation) HKLM-x32\.\Run: "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" (CyberLink Corp.) HKLM-x32\.\Run: "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup (Citrix Systems, Inc.) HKLM-x32\.\Run: C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe (Alcor Micro Corp.) HKLM\.\Run: C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming (Logitech, Inc.) HKLM\.\Run: "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey (Microsoft Corporation) HKLM\.\Run: C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch (Logitech, Inc.) HKLM\.\Run: C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.exe (Dell Inc.) HKLM\.\Run: RUNDL元2.EXE C:\Windows\system32\NvCpl.dll,NvStartup (NVIDIA Corporation) HKLM\.\Run: C:\Program Files\Realtek\Audio\HDA\Skytel.exe HKLM\.\Run: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
#Broadcom netlink gigabit ethernet driver download bcmwl664 windows 7
Windows 7 Home Premium (X64) OS Language: English(US) Scan result of Farbar Recovery Scan Tool (FRST) (圆4) Version: 13-03-2013
Thanks for any help, this is way above my paygrade and I really need a hand. I skipped deletion pending further advice.I am concerned the MBR might have been damaged when Kaspersky removed the initial Pihar trojan. Booted again with Kaspersky Rescue, ran further scan on C: which reports also finding "." States it cannot disinfect and recommends deletion. Tried startup repair which was ineffective. I then rebooted and was met with the blue screen loop. Kaspersky found Pihar Trojan rootkit which was disinfected. I then booted with Kaspersky Rescue 10 disk and ran scan (just on boot and startup items). I was able to log back in with normal windows and was met with normal desktop but could not run most programs or exe files, though I could run applications like windows file manager. Last evening suddenly all of my applications closed out and the computer shut down. My desktop running Win 7 64bit now will not boot (blue screen loop). I have an issue similar to the previous bluescreen loop topic (dated ) following virus removal by Kaspersky.
0 kommentar(er)
