Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: possible virus, which forum to go to for help


26 Jan 2013   #41

W7 premium 64
 
 

Hello and thx for following up. Will do this in the morning after some shut eye.

My System SpecsSystem Spec
.

26 Jan 2013   #42

Windows 7 Home Premium
 
 

No problem, drmax.

Going to get some Zzzzsss also.

Might not het back to you until tomorrow afternoon. Having lunch with a couple of friends.
My System SpecsSystem Spec
27 Jan 2013   #43

W7 premium 64
 
 

Here you go. Does this ck more than just the operating systems drive? I have another storage drive that pretty big. I'd like this looked over.


Attached Files
File Type: txt Fixlog.txt (332 Bytes, 6 views)
My System SpecsSystem Spec
.


27 Jan 2013   #44

Windows 7 Home Premium
 
 

drmax,

Let’s check the Master Boot Record; another location where Rootkits hide.

In the clean computer with the USB flash drive plugged in...

Please download MBRFix:
Download MBRFix 1.3.0.0 Free - Fix or create Master Boot Record (MBR) on harddisks - Softpedia
Save to the Desktop.

Right-click the file and select: Extract here…

Once extracted, there are three files in the folder that is created.

Copy only the MBRFix64 application to the USB drive.


Now, open Notepad: (Start > All Programs > Accessories > Notepad).
Copy the entire contents of the code box below.

Code:
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox]  ATTENTION! ====> ZeroAccess
SaveMbr: Drive=0
Save this info on the flashdrive as fixlist.txt
 

Once again, please enter System Recovery Options and select: Command Prompt

Run FRST and press the Fix button just once, and wait.

When done, the tool makes a log on the flashdrive called Fixlog.txt.

Please post its contents in your reply.

Another file, MBRDUMP.txt also appear on the flash drive.
It may look a text file, but it is not. It is a hex file! (Don't open it, it will be all gibberish.)

Please attach the MBRDUMP.txt in your reply.
My System SpecsSystem Spec
27 Jan 2013   #45

W7 premium 64
 
 

will get to this asap, hopefully within an hour or 2
My System SpecsSystem Spec
27 Jan 2013   #46

W7 premium 64
 
 
?

2 of the 3 app files are mbrfix and mbrfix64? my machine is a 64 bit. you asked me to use the mbrfix. double checking before you ask me to do over. thx dm
My System SpecsSystem Spec
27 Jan 2013   #47

Windows 7 Home Premium
 
 

That one went right over my head, my apology!

You are correct. It is: mbrfix64
My System SpecsSystem Spec
28 Jan 2013   #48

W7 premium 64
 
 
last one

Here you go...and also, I thought since mbrfix64 is an exe program, i would have type that at comand prompt, rather that the frst64? (unless those too work together in frst64) Anyway's I did what you asked.
I gotta go work now. Thx for all your help....DM


Attached Files
File Type: txt MBRDUMP.txt (512 Bytes, 1 views)
My System SpecsSystem Spec
28 Jan 2013   #49

Windows 7 Home Premium
 
 

Got the MBRDump.txt, and will be looking at it.

Also provide the last Fixlog.txt

FRST64 produced it also on the USB flash drive.
My System SpecsSystem Spec
28 Jan 2013   #50

W7 premium 64
 
 
ok

ok didn't catch that....


Attached Files
File Type: txt Fixlog.txt (534 Bytes, 3 views)
My System SpecsSystem Spec
Reply

 possible virus, which forum to go to for help




Thread Tools



Similar help and support threads for2: possible virus, which forum to go to for help
Thread Forum
Solved how to fix / clean windows from ramnit virus and virut virus? System Security
I have a virus and unable to run/download anti-virus software System Security
Want ideas for Virus removal if virus shows up in safemode CMD System Security
Partition Virus/Non-system Drive Virus System Security
Solved Is there a Forum issues Forum Chillout Room
Virus On Forum, Or...? General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:46 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33