Expert: Brian Benosky - 7/18/2009

Question
Yes i believe my computer is infected but would not let me follow the steps above. that is the issue whatever has taken over my computer will not me download most updates or virus products. I tried to rename the file.It is not falling for that either. Issue everytime i open internet explorer says iexplore.exe bad image globalroot\systemroot\system32\ESQULtjrqpmlwxcoyfrtfriaqbbebtdgptmrf.dll

I have norton which for some reason will not scan it is being blocked and can not check for update for norton or anything else i try to add.

Answer
Hi Sharonda

First try booting into Safe Mode, try clicking the links below to run the scans, then post me the logs.  If that does not work, I can try sending you the files via email.  My address is numbersix6@yahoo.com.

Restart the computer in Safe Mode by continuously tapping the F8 key on boot until a black screen with a menu appears.  Choose to Start Windows in Safe Mode with Networking.  Log on as usual.  

Please download Malwarebytes' Anti-Malware to your desktop from here:

http://www.besttechie.net/tools/mbam-setup.exe

Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to
o Update Malwarebytes' Anti-Malware
* then click Finish.
* If an update is found, it will download and install the latest version.
*Run a Full Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.  Save that log and reboot normally.

Download and install HijackThis:

http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

Make sure you close EVERY open window and ALL browser windows. The only thing that should be open is the HijackThis program.
Double-click on the file you just downloaded.
Click on the "Install" button.
Upon install, HijackThis should open for you.
Should it not open, go to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe
Choose 'Do a system scan and save a log file'.
Copy the text file which opens in Notepad and paste it in your follow-up, along with the Malwarebytes log.
* Do not fix any entries in HijackThis, as they may be harmless.

Brian