03-09-2012 06:05 PM
There are other files that I found in the NPE file but the forum will not let me post because they do not have the correct extentions. They are .dat files and .etl files. Let me know if you need them, maybe I can email them to you.
03-10-2012 03:29 AM
a) it looks like in some way AVG and possibly System Restore might be stuck is some way, can you please uninstall AVG and then use its removal tool.
b) You have what reminds me of Conficker, So after AVG is removed I will probably get an offline log done and another more in depth scan with what is reuired to look for, like ADS entries.
Quads
03-11-2012 03:46 PM
Muast be getting help somewhere else, as if it was someone elses PC (Bosses) I would be quicker than this back as it's not my PC for starters.
Quads
03-12-2012 07:05 AM
?? Not understanding your statement there, the wording is a bit disjointed - been working all weekend so haven't had the time to post the AVG logs...will do as soon as I get home. Yes, I'm getting help from several different sources due to several different problems - I have not been shy about this :-)
03-12-2012 01:37 PM - edited 03-12-2012 01:42 PM
I will let one of the other forums help you, and I didn't ask for AVG logs.
Serveral different problems so, getting help form Comcast, Bleeping Computer, This forum and other sites. Myself and Bleeping Computer does not like that as it confuses things, one forum says to do this while one says to do that. But that makes it harder and more complicated for the helpers.
Good Luck with other forums, with this
Quads
03-12-2012 02:05 PM
??? Ok dude, your attitude is super wicked and is screwing with my chi. :-) It's all good, I understand your point but you aren't seeing mine in any way shape or form - because clearly you are an expert on all things "forum". You were just talking about conlicts with AVG and Norton, I was just trying to help you understand what I was doing by posting the log...but whatever. Thanks for trying to help - next time if you don't agree just don't try to help, it's all good, no hard feelings, I ain't mad at you LOL. I have a Norton expert helping me privately and I will post solution here as to what happens, so that others may benefit from my ignorance. Again, thanks for the insight - sorry we are not on the same page on this - just unsubscribe, you won't have to worry about me. :-) Wooosaaaahhh, have a good one.
03-12-2012 02:27 PM
Too many people from different souces all over is not good and Bleeping Computer Malware Removal does not allow it either.
For a Start I did say to do something with AVG but it was not to post logs but something else. I can see what should not be as Malware removal people would and probabliy the reason why Normal Mode BSOD's after an object removal
Bleeping and Comcast also warned you about getting help from many sources "Following instructions from different people may mess up your PC.Also i did not ask you to run malwarebytes or AVG.Its useless to run them if your PC is infected by rootkits.Run the tools instructed before."
Comcast also warned of that fact,
For all the others on the web or by tech support trying to help, this is what's bad, just was working on what it is and other files and settings possibly connected to below (including ADS entries).
Service C:\??\C:\Windows\system32\drivers\ajuileky.sys (*** hidden *** ) [SYSTEM] ajuileky
Reg HKLM\SYSTEM\CurrentControlSet\Services\ajuileky
Reg HKLM\SYSTEM\CurrentControlSet\Services\ajuileky@Ty
Reg HKLM\SYSTEM\CurrentControlSet\Services\ajuileky@St
Reg HKLM\SYSTEM\CurrentControlSet\Services\ajuileky@Er
Reg HKLM\SYSTEM\CurrentControlSet\Services\ajuileky@Im
Reg HKLM\SYSTEM\CurrentControlSet\Services\ajuileky@Gr
Reg HKLM\SYSTEM\CurrentControlSet\Services\ajuileky@Ar
Quads
03-12-2012 04:28 PM
Quads, holy Christ man! I get it, quit jamming it down my throat! This has actually gone on too far. Where everyone else is helping you are too busy chastizing me. I'm really over it. Please - you have said your peace and I thank you but I think we need to part ways. If you have anything of anything else to say, by all means send me a private message but this public displayof "affection" on the open forum just to prove your point is just not cool.
I'm wrong, you're right, got it: next time I have an issue as big as this I will not post on multiple sites...I've learned my lesson, valuable experience. Now, I told you a professional from Norton was helping me with the Norton issue privately - there is no longer any reason for you to post here unless you have something constructive to say other than that I'm a forum newbie and I need to learn the ropes...point recieved.
Thank you very much and goodnight.
03-15-2012 02:01 PM
Here are some instructions to fix the issue by running NPE from an NBRT boot disk, rather than by running it on the infected partition itself. This may be able to get around the problem.
Create NBRT boot disk or USB key using a clean, working computer:
1. Visit http://security.symantec.com/nbrt/nbrt.aspx?
2. Select the "Download Now" option which applies to your Norton license type.
3. After it’s done downloading, launch NBRT-Retail-Downloader.exe, this will launch Norton Download Manager.
4. Go through the on screen directions to complete the install.
4. After the install completes, use the Norton Bootable Recovery Tool Wizard.
5. Select "Create on CD/DVD media" or "Create on USB key" depending on which is most convenient.
6. Complete the wizard to create a boot disk / boot USB key.
On the infected/unbootable computer:
1. Boot from the USB key or CD/DVD you created.
1. You may need to adjust the boot order settings in BIOS to avoid booting from the hard drive. Instructions for doing this can be found in the documentation for your motherboard.
2. If using a CD/DVD, when you start the computer hit any key when it says "Press any key to boot from CD..."
After you boot into NBRT:
1. Enter your product key or pin
2. Select "Norton Power Eraser Recovery Scan"
3. Click the History button
You should see multiple choices for Operating system.
4. Choose the operating system installed on the computer (not WinPE).
5. Select the session for which risks were removed and the boot issue arose.
6. Click Next
7. Click Undo
8. Review results (make note of any failures) and click Done
9. Click Exit, click Exit
The computer should reboot
03-23-2012 04:42 PM
Thanks, but I don't have a Norton license key or pin. I ran the eraser has a separate program.
BTW Matthew Halttunen is now helping me directly so I'm going to ask to have this thread closed.
Thanks to everyone for their help! Much appreciated!
~Camille
