hi sir jay, i have the same problem with sabs... can you please upload again the explorer.exe i really need it... or email it to me: *REMOVED*

thanks in advance...

Hello. I split that topic.

Also, removed your email. It is dangerous to post an email live, especially in a forum, as each topic gets seen by at least 20 bots, and 200 users.

========

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
  
• Copy the content of the following codebox into the main textfield:
  

  Code:

  
:filefind
explorer.exe
iastor.sys
atapi.sys


  
  
  
• Click the Look button to start the scan.
  
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
  

Note: The log can also be found on your Desktop entitled SystemLook.txt

hi sir jay, here's the log file:

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 13:15 on 13/03/2010 by PC-1 (Administrator - Elevation successful)

========== filefind ==========

Searching for "explorer.exe"
C:\WINDOWS\Explorer.EXE --a--- 1075200 bytes [01:41 13/03/2010] [01:41 13/03/2010] 2DEACA71A7FD77205F59D48D76B2F565

Searching for "iastor.sys"
C:\D\M\IN\1\iastor.sys --a--- 872064 bytes [10:46 13/02/2010] [07:33 17/06/2005] 9A65E42664D1534B68512CAAD0EFE963

Searching for "atapi.sys"
C:\WINDOWS\system32\drivers\atapi.sys --a--- 95616 bytes [01:10 13/01/2006] [01:10 13/01/2006] C4B52426B79C6F6664B70B8E63B1B837

-=End Of File=-

Run this, then I will instruct you what to do next.

Please download ComboFix from BleepingComputer.com

Alternate link: GeeksToGo.com

Alternate link: Forospyware.com

Rename ComboFix.exe to commy.exe before you save it to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found here
  
• Click Start>Run then copy paste the following command into the Run box & click OK "%userprofile%\desktop\commy.exe" /stepdel
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console

Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

• Click on Yes, to continue scanning for malware.
  
• When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply.
  

hi sir.. i got the same problem
here the systemlook log:
SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 08:39 on 08/08/2010 by hapih (Administrator - Elevation successful)

========== filefind ==========

Searching for "explorer.exe"
C:\WINDOWS\explorer.exe --a--- 1075200 bytes [11:54 07/08/2010] [11:54 07/08/2010] (Unable to calculate MD5)

Searching for "iastor.sys"
C:\D\M\IN\1\iastor.sys --a--- 872064 bytes [17:03 18/01/2010] [07:33 17/06/2005] 9A65E42664D1534B68512CAAD0EFE963

Searching for "atapi.sys"
C:\WINDOWS\system32\drivers\atapi.sys --a--- 95616 bytes [01:10 13/01/2006] [01:10 13/01/2006] C4B52426B79C6F6664B70B8E63B1B837

-=End Of File=-

Please start a new topic in this section, and explain the issues you are having.