Fake HDD linked with many other viruses crauto.dll Root kit

computergeekguy

computergeekguy

New member
Pro User
Local time
10:00 PM
Messages
334
Hi I am working on a friends computer that had gotten the smart HDD virus and it did the normal thing hidding file folders etc. etc.

We ran malwarebytes and it found a toatal of 44 infections. They were deleted and i run unhide.exe

It un hid all of his files but i think the comp is still infected due to slow performance command prompts showing up out of nowhere.

The computer was infected through a fake adobe update.

Since i thought he was still infected i ran some more scans with other programs he had pre installed on his machine.

Spybot s&d found 3 more i cleaned them.

I then ran BitDefender rescue cd and it found crauto.dll Trojan.Sirefef.BV

I lookied online and it says it is a root kit. Before i delete it i am going to run it past you.



I would give all the other virus info but currently i am booted in bitdefender and want to decide whether to delete this or not.

Thanks
 

My Computer My Computer

At a glance

7 home premium 64 bitAMD Phenom II X6 1055TDDR3 1333 6144 MBytes each modual 2048 mbPower Color ATI R9 270x bluescreen edition
Computer type
PC/Desktop
Computer Manufacturer/Model Number
self build
OS
7 home premium 64 bit
CPU
AMD Phenom II X6 1055T
Motherboard
Asus M4A785TD-M EVO
Memory
DDR3 1333 6144 MBytes each modual 2048 mb
Graphics Card(s)
Power Color ATI R9 270x bluescreen edition
Sound Card
s/pdif part of my motherboard
Monitor(s) Displays
It is a 42" lcd tv :D
Screen Resolution
1920 X 1080
Hard Drives
Samsung 120gb SSD (EVO 840)
Hitachi 500gb 3gb\s sata hard drive, slow boring but gets the job done
PSU
Orion 585w psu Model# HP585D (updated to EVGA 600W)
Case
A shoebox
Cooling
Box fan....
Keyboard
I telepathically convay what I want said.
Mouse
Cat
Internet Speed
Loading...
Antivirus
A facial mask
Browser
Firefail, Internet Exploder
Other Info
I love my gaming rig, FreeCell and Solitaire never looked so good.
Ok i deleted it another comp tech said go ahead.

Here are some logs and pics of the viruses.


Hope this helps
 

Attachments

My Computer My Computer

At a glance

7 home premium 64 bitAMD Phenom II X6 1055TDDR3 1333 6144 MBytes each modual 2048 mbPower Color ATI R9 270x bluescreen edition
Computer type
PC/Desktop
Computer Manufacturer/Model Number
self build
OS
7 home premium 64 bit
CPU
AMD Phenom II X6 1055T
Motherboard
Asus M4A785TD-M EVO
Memory
DDR3 1333 6144 MBytes each modual 2048 mb
Graphics Card(s)
Power Color ATI R9 270x bluescreen edition
Sound Card
s/pdif part of my motherboard
Monitor(s) Displays
It is a 42" lcd tv :D
Screen Resolution
1920 X 1080
Hard Drives
Samsung 120gb SSD (EVO 840)
Hitachi 500gb 3gb\s sata hard drive, slow boring but gets the job done
PSU
Orion 585w psu Model# HP585D (updated to EVGA 600W)
Case
A shoebox
Cooling
Box fan....
Keyboard
I telepathically convay what I want said.
Mouse
Cat
Internet Speed
Loading...
Antivirus
A facial mask
Browser
Firefail, Internet Exploder
Other Info
I love my gaming rig, FreeCell and Solitaire never looked so good.
Are you thinking that you can just delete a Rootkit?
Rootkit - Wikipedia, the free encyclopedia

Some Trojan.Sirefef.BV infections contain trojan and keyloggers which can be used to steal sensitive data like passwords, credit card, bank account information etc.
 

My Computer My Computer

At a glance

Windows 7 Ultimate 32bit SP1Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz4 GBATI Radeon HD 2600 Pro
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
O boy root kits don't sound very fun :( I thought i might be able to get away with it due to there being root kit scanners. But it sounds like re installation of os is highly probable at this point.


How about hitman pro? Would that help anything? Thanks
 

My Computer My Computer

At a glance

7 home premium 64 bitAMD Phenom II X6 1055TDDR3 1333 6144 MBytes each modual 2048 mbPower Color ATI R9 270x bluescreen edition
Computer type
PC/Desktop
Computer Manufacturer/Model Number
self build
OS
7 home premium 64 bit
CPU
AMD Phenom II X6 1055T
Motherboard
Asus M4A785TD-M EVO
Memory
DDR3 1333 6144 MBytes each modual 2048 mb
Graphics Card(s)
Power Color ATI R9 270x bluescreen edition
Sound Card
s/pdif part of my motherboard
Monitor(s) Displays
It is a 42" lcd tv :D
Screen Resolution
1920 X 1080
Hard Drives
Samsung 120gb SSD (EVO 840)
Hitachi 500gb 3gb\s sata hard drive, slow boring but gets the job done
PSU
Orion 585w psu Model# HP585D (updated to EVGA 600W)
Case
A shoebox
Cooling
Box fan....
Keyboard
I telepathically convay what I want said.
Mouse
Cat
Internet Speed
Loading...
Antivirus
A facial mask
Browser
Firefail, Internet Exploder
Other Info
I love my gaming rig, FreeCell and Solitaire never looked so good.
it sounds like re installation of os is highly probable at this point.
Click to expand...
That would be my instructions .... do a "Clean" install! Also, all passwords need to be changed.
 

My Computer My Computer

At a glance

Windows 7 Ultimate 32bit SP1Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz4 GBATI Radeon HD 2600 Pro
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
I talked to him and we agreed to reinstall and yes I talked about changing passwords on a known clean comp.

I am backing up data and such


Thanks for your help Wish it turned out better but this is how it goes sometimes
 

My Computer My Computer

At a glance

7 home premium 64 bitAMD Phenom II X6 1055TDDR3 1333 6144 MBytes each modual 2048 mbPower Color ATI R9 270x bluescreen edition
Computer type
PC/Desktop
Computer Manufacturer/Model Number
self build
OS
7 home premium 64 bit
CPU
AMD Phenom II X6 1055T
Motherboard
Asus M4A785TD-M EVO
Memory
DDR3 1333 6144 MBytes each modual 2048 mb
Graphics Card(s)
Power Color ATI R9 270x bluescreen edition
Sound Card
s/pdif part of my motherboard
Monitor(s) Displays
It is a 42" lcd tv :D
Screen Resolution
1920 X 1080
Hard Drives
Samsung 120gb SSD (EVO 840)
Hitachi 500gb 3gb\s sata hard drive, slow boring but gets the job done
PSU
Orion 585w psu Model# HP585D (updated to EVGA 600W)
Case
A shoebox
Cooling
Box fan....
Keyboard
I telepathically convay what I want said.
Mouse
Cat
Internet Speed
Loading...
Antivirus
A facial mask
Browser
Firefail, Internet Exploder
Other Info
I love my gaming rig, FreeCell and Solitaire never looked so good.
You must log in or register to reply here.
Back
Top