Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: possible virus, which forum to go to for help

26 Jan 2013   #31

Windows 7 Home Premium
 
 

Jacee,

Have read different opinions on removing, or not removing Rootkits.

There are quite a number of forums that deal with Rootkits on a daily basis, successfully!

The option to reformat is always there, but, there seem to be more Users cleaning the computer (with assistance from the forums) than doing a wipe and clean install.

Personally, after loaning my laptop to a neighbor, upon return it had a rootkit. Took action to remove it, and now posting from it. It wasn't easy to get rid of, but, the computer is stable, and no further problems developed.

There are tools available to remove Rootkits that do a great job, and experts agree that more than one should be used to confirm removal.

Bottom line appears to be that it is up to the User on whether to clean the computer, or do a total wipe and clean install.

My System SpecsSystem Spec
.

26 Jan 2013   #32
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

It is most definitely up to the user!

But.... I, personally, will not try to clean up such a compromised computer. I've seen many users come back to the malware help forums after having been declared that their computer was clean of the rootkit.
My System SpecsSystem Spec
26 Jan 2013   #33

Windows 7 Pro. 64/SP-1
 
 

A person removing a rootkit and having a stable computer is great but not my concern. My concern is a computer that a rootkit has been removed still running very quietly a Botnet and or stealing the new passwords for banking, credit card information and on line accounts and the like. We do all agree the the owner has to make that decision. I'm cautious and a little security paranoid. Many years ago I had a bank account wiped out and still have a little bad taste in my mouth. That was before the banks and credit card companies would help you when such things happened. Their attitude was my money, my account, my problem can we help you with anything else. Thank you for doing business with Give a Shot Bank.
My System SpecsSystem Spec
.


26 Jan 2013   #34

Windows 7 Home Premium
 
 

In the computer world, anything is possible, as we all know!

I have always gone for the fixing of the computer. There are quite a few very reputable forums with advisors that do the same.


Every person brings in a different experience...


If security paranoid and going for a new install, buying a new hard drive would be on my list vs. wiping the disk.
My System SpecsSystem Spec
26 Jan 2013   #35

Windows 7 Pro. 64/SP-1
 
 

I wipe a new hard drive before using. One never knows what might be on it.

http://netsecurity.about.com/od/anti...th-Malware.htm
My System SpecsSystem Spec
26 Jan 2013   #36

W7 premium 64
 
 
attention CottonBall

Here is the required info. I had the mbar logs last night, but they were from a post scan of the original findings. So I will put all that stuff here, including the latest scan in dos. Thx and I'll rep you.

PS. Firewall is working fine now, I'm thinking. I use "allshare" by samsung to port stuff to my tv, and for some reason I'm having to disable firewall to run this, which i don't think i did in the past. I'll have to look into this. If there is a prob., I'll post back.


Attached Files
File Type: txt mbar-log-2013-01-25 (22-23-07).txt (1.8 KB, 4 views)
File Type: txt mbar-log-2013-01-25 (22-23-22).txt (1.8 KB, 3 views)
File Type: txt mbar-log-2013-01-25 (22-35-34).txt (1.8 KB, 5 views)
File Type: txt FRST.txt (43.0 KB, 11 views)
My System SpecsSystem Spec
26 Jan 2013   #37

Windows 7 Home Premium
 
 

Thanks for the info, drmax.

The MBAR logs do not show anything, but, you say those are from post scans, so that makes sense.

The FRST64 results do show some ZeroAccess remnants. Need to take a close look at the entire report.

Going to be out and about today, so, will get back with you later.

Thanks for your patience.
My System SpecsSystem Spec
26 Jan 2013   #38

Windows 7 Home Premium x64 SP1
 
 

Glad to see that MBAR worked so well for you. Those Malwarebytes guys are definitely on top of their game!
My System SpecsSystem Spec
26 Jan 2013   #39
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

FRST shows quite a mess of infected files and apps
My System SpecsSystem Spec
26 Jan 2013   #40

Windows 7 Home Premium
 
 

drmax,

Although MBAR took care of some of the ZeroAccess, there are still ZA files left in the system. That just stresses the importance of not placing all your trust on one program. Different programs have different definitions they target.

Let's press on...


Please do the following...
Open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below to Notepad.
Code:
start
C:\Windows\assembly\tmp
C:\Users\greg\AppData\Local\89e89c8d
end
  • In Notepad, go to File > Save as...
  • Save to: the USB flash drive
  • In File name use: fixlist.txt
  • Click: Save
Have FRST.exe and fixlist.txt on the flash drive.

Next, plug the flash drive into the infected computer.







Now, please enter System Recovery Options like you did previously:
  • >>> Restart the computer, etc. > select: Command Prompt
  • Type e:\frst64.exe, and press: Enter
  • Replace the drive letter g with the drive letter of your flash drive, or SD Card!
  • In FRST, this time press the Fix button.
The program saves a Fixlog.txt, on the flash drive.

Click the Command prompt window, type exit, and press: Enter
Back at the System Recovery Options, press: Restart

Let the computer boot normally.

Please copy/paste the Fixlog.txt in your reply.
My System SpecsSystem Spec
Reply

 possible virus, which forum to go to for help




Thread Tools



Similar help and support threads for2: possible virus, which forum to go to for help
Thread Forum
Solved how to fix / clean windows from ramnit virus and virut virus? System Security
I have a virus and unable to run/download anti-virus software System Security
Want ideas for Virus removal if virus shows up in safemode CMD System Security
Partition Virus/Non-system Drive Virus System Security
Solved Is there a Forum issues Forum Chillout Room
Virus On Forum, Or...? General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:26 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33