Windows Command Processor Notification

[COMPAQ7]

Hello all,

I keep getting the windows command processor notification despite clicking no. I read a few thread on the net, so it seems like it's a virus/trojan?
I have in the last ten minutes or so posted about this in another forum, is it ok to get support from two different sites? Also all this is happening on my other laptop.  I have run microsoft support emergency response tool and it found one infected file/item but it could not remove it. I've also downloaded malwarebytes but that won't start up when clicked.

I would be grateful for any help as I am very worried about this all.

[mikaelrask]

welcome to the forum. i suggest you follow this guide.

http://forum.avast.com/index.php?topic=53253.0

what was the infection the tool from Microsoft found?
anything from malwarebytes?

good luck

[Pondus]

I've also downloaded malwarebytes but that won't start up when clicked.

Use Chameleon to run Malwarebytes Anti-Malware on infected systems
http://helpdesk.malwarebytes.org/entries/20872371-use-chameleon-to-run-malwarebytes-anti-malware-on-infected-systems

Chameleon Gets Malwarebytes Anti-Malware Installed and Running
http://www.malwarebytes.org/products/chameleon/

[essexboy]

It is not advisable to get assistance on two different forums, as each malware remover will approach the problem in a different way.  This can lead to damage to the system

[COMPAQ7]

Hello and thank you for your replies.

I can't remember exactly what the infection was but i remember the name "ramnit"?

I have discontinued the help from the other website and i am only now concentrating on the support from this website.

I will follow the guide to get malwarebytes working and get back to you.

[Pondus]

also see the guide Mikaelrask gave you...and attch the logs...we need
 
AdwCleaner
Malwarebytes
OTL
aswMBR

[COMPAQ7]

Ok, will do.

I also forgot to mention that I installed Norton 360 and did a full scan. It found 119 infected files or something like that and that
it had dealt with them. I restarted but the problem is still appearing.

[Pondus]

No surprise since Ramnit is a fileinfector......meaning this may end with a reinstall   

but lets see what Essexboy say when he have the logs

[COMPAQ7]

I've followed the guide and have attached the logs. I only need to attach one more log in my next post.

I would also like to point out that in the past i tried to install AVG anti-virus but it would not respond when installed
or would not install at all, i can't remember exactly.

[Pondus]

I've followed the guide and have attached the logs. I only need to attach one more log in my next post.

I would also like to point out that in the past i tried to install AVG anti-virus but it would not respond when installed
or would not install at all, i can't remember exactly.

do you also have aswMBR log?

I would also like to point out that in the past i tried to install AVG anti-virus but it would not respond when installed

many malware will try to  block install of AV....also if you already had Norton installed that can also be the reason. Never install more then one AV

[COMPAQ7]

I've attached the final log.

Thanks for the advice about never installing two AV's.

Is it safe to be on the net and on websites like ebay and checking e-mails whilst all this is going on?

[Pondus]

with Ramnit on board....i doubt it

Ramnit info
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Search.aspx?query=Ramnit

[essexboy]

No you need to isolate the system... Be advised this may well not work


Create an emergency repair USB drive:
Download Dr Web Live USB to your desktop

• Connect a USB flash drive to the computer. Registering the plugging in event takes no more than 10 seconds.
• Launch drwebliveusb.exe.
• The program will detect available USB-devices automatically and prompt you to choose the one you’d like to use as an emergency repair drive. You can format the device if you like (a warning will be displayed before you proceed with formatting). In order to read the License agreement, follow a corresponding link found in the program window (the page containing the license agreement text will be loaded in your default browser).

• To create a bootable USB flash drive, press the Create Dr.Web LiveUSB button.
• Files will be copied automatically.
• Once the copying process is completed, press the Exit button to close the application.
• Reboot the infected computer with the USB in the drive
• Ensure that the first boot device is USB - If you are not sure about that then see this page for instructions
  
• As loading starts, a dialogue window will prompt you to choose between the standard and safe modes.

• Use arrow keys to select  DrWeb-LiveCD (Default)
• When the system is loaded, check the disks or folders you want to scan, and click on ?Start?.

• The programme will now scan for and cure/delete any malware that it finds.  Allow it to do so 
• Once completed reboot to normal windows
• No log is produced so once in normal windows run a fresh OTL scan and let me know if the problems persist

[COMPAQ7]

Ok, I will do this. Some questions though:

By USB flash drive, do you mean USB stick?

When saying about formatting, do you mean formatting the USB flash drive?

I'm thinking of getting a new laptop in any case but it is advisible to get this one sorted right?
Can this virus get onto a new laptop if I was to transfer everything from one hard drive to another.

Lastly, can this virus spread through a network (home or work network) and get to other Computers, PC,s, Laptops, etc.

[Pondus]

Lastly, can this virus spread through a network (home or work network) and get to other Computers, PC,s, Laptops, etc.

see the ramnit info i posted above

Essexboy should be back in here in 3-4 hours