|27 Jan 2013||#44|
Let’s check the Master Boot Record; another location where Rootkits hide.
In the clean computer with the USB flash drive plugged in...
Please download MBRFix:
Download MBRFix 22.214.171.124 Free - Fix or create Master Boot Record (MBR) on harddisks - Softpedia
Save to the Desktop.
Right-click the file and select: Extract here…
Once extracted, there are three files in the folder that is created.
Copy only the MBRFix64 application to the USB drive.
Now, open Notepad: (Start > All Programs > Accessories > Notepad).
Copy the entire contents of the code box below.
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] ATTENTION! ====> ZeroAccess SaveMbr: Drive=0
Once again, please enter System Recovery Options and select: Command Prompt
Run FRST and press the Fix button just once, and wait.
When done, the tool makes a log on the flashdrive called Fixlog.txt.
Please post its contents in your reply.
Another file, MBRDUMP.txt also appear on the flash drive.
It may look a text file, but it is not. It is a hex file! (Don't open it, it will be all gibberish.)
Please attach the MBRDUMP.txt in your reply.
|My System Specs|
|Thread Tools||Search this Thread|
|Similar help and support threads|
how to fix / clean windows from ramnit virus and virut virus?
my windows infected ramnit virus and virut virus,how to clean them?
Want ideas for Virus removal if virus shows up in safemode CMD
Hi, Looking for general ideas on how everyone else handles a strong virus. If the virus is showing up in Windows regular mode, it opens in safemode and opens in safmode with command prompt. Besides the usual such as boot to repair mode and use system restore, dock hard drive to another pc and...
Is there a Forum issues Forum
Most places I've been to have a dedicated subforum for handling issues or questions regarding the forum, moderation and similar. Do we have one such here?
Virus On Forum, Or...?
Hello, I received a Google-Alert that someone on the Fprum here has answered a Query of mine. As usual, it gives a link on to go directly to it. Using Thunderbird. What opens up is a graphic that says: Wanted Web page required
© Designer Media Ltd
All times are GMT -5. The time now is 11:05.