crazz2323

Member
  • Content Count

    28
  • Joined

  • Last visited

Community Reputation

0 Neutral

About crazz2323

  • Rank
    Member
  1. Done thanks! I would like to thank you so much for assisting me. Your advice has been right on the money and I really appreciate the time you took. I would recommend you to anyone. A donation via Paypal is on its way! Thanks!
  2. Ok, I followed everything but I am unable to delete the C:\Qoobox folder. It says I do not have admin rights and when I click OK to get them, it still is unable to be deleted. Everything else is good. Also, should I delete everyone from the permissions you had me change for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SDRSVC?
  3. Ok here are the logs. net start sdrsvc started fine net start wscsvc said it was already running net start wuauserv said it was already running
  4. It seems to me the damage would happen after running Combofix. Not sure if that warning about Microsoft Security essentials detected even though I had it disabled had anything to do with it. Either way, I uninstalled it last time as well as Spybot and Malwarebytes so the only thing running now should be EAM. I ran the scans again. Deep scan with EAM and a scan with OTL.
  5. I was no able to get the sdsvc.reg to work and the registry said it could not change some of the permissions when I tried. So I went line by line and made sure the registry matched what the sdrsvc.reg does. It matched exactly and I did not need to edit anything. I was able to get the proper permissions and run the legacy_sdrsvc.reg successfully. I noticed before I ran it the [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SDRSVC] did not even exist in my registry so it imported properly. I now ran FSS.exe and here is the log.
  6. I tried running sdrsvc.reg and it gives an error saying some keys are open by system or other processes. I also tried running it in safe mode. See attached pic.
  7. Yes I did. Should I try to run each .reg them individually? I tried it again but it goes so fast I can't make out what it says.
  8. I already had Spybot disabled so I do not know why Teatimer was still active. So for now I uninstalled Spybot as well as Microsoft Security Essentials. I rebooted and ran FixSdrSvc.bat and I noticed when the command window popped up briefly, it said ERROR: Error accessing the registry, The Windows Backup service is starting, The Windows Backup service was started successfully. Should I just stop the windows backup service, run the two .regs without the bat file and start the service again?
  9. When I run Combofix it says Microsoft Security Essentials is still on even though I disabled it via turning off Real time protection. It's warning me it may cause damage. How can I be sure its really disabled before running the rest of combo fix. See attached error.
  10. Ok, followed the directions and here are the logs. OTL did not generate an Extras.txt log file.