search.txt and FRST.txt

webgal318 · 22 Mar 2013

I ran the TDSS killer. It found malware called "Harbinger" after scan was complete.
I selected Quarantine because there was no Delete option.
PC restarted, scanned again, no threats found.
I would like to check with you and your team before I marked this one solved.

As you may have seen from my previous posts, this PC could not even go into the Windows splash screen when I started and it has taken many tries, scans etc. to get to this point.

One last question:What items from the "msconfig" Startup menu can I safely deselect?

Thanks for all your help.

-Sylvia

VistaKing · 22 Mar 2013

In MSconfig you may uncheck everything but the antivirus software Windows . Or better yet can we get a PrntScrn of your Startup tab from msconfig ?

webgal318 · 22 Mar 2013

I had to do this in two shots because I could not expand the window.

Thanks

-Sylvia

VistaKing · 22 Mar 2013

Do you use the Intel Software to manage your WiFi or the one that is in Windows ? You may uncheck Adobe Reader along with the Adobe Acrobat , Quickset , Roxio Burn and Dell Datasafe.

webgal318 · 22 Mar 2013

Intel- I just checked.

Thanks

VistaKing · 22 Mar 2013

My preference you may uncheck everything but the Microsoft and Antivirus software . The things that are in STARTUP tab are programs that startup when the PC is booting into windows . You could launch the programs manually .

cottonball · 22 Mar 2013

webgal318,

On TDSSKiller...

Want to confirm you are OK in that area.

By default, this tool outputs its log to the system disk root folder (the disk with the Windows operating system,
normally C:\).

Logs have a name like:
C:\TDSSKiller.2.4.7_22.03.2013_15.31.43_log.txt

Would you kindly post the TDSSKiller log in your reply. It is not possible to give you appropriate guidance when operating in the blind.

Also need to know whether TDSSKiller needed a reboot.

Thanks! :)

Borg 386 · 22 Mar 2013

webgal318 said:

Re: McFubar: No I haven't even seen this or heard of this. What info do you have on it.

McFubar = McAfee. It causes more problems then it solves.

webgal318 · 22 Mar 2013

I will post in a couple of days as I have a full week-end. TDSS killer did need a reboot.
Thanks so much.

cottonball said:

webgal318,

On TDSSKiller...

Want to confirm you are OK in that area.

By default, this tool outputs its log to the system disk root folder (the disk with the Windows operating system,
normally C:\).

Logs have a name like:
C:\TDSSKiller.2.4.7_22.03.2013_15.31.43_log.txt

Would you kindly post the TDSSKiller log in your reply. It is not possible to give you appropriate guidance when operating in the blind.

Also need to know whether TDSSKiller needed a reboot.

Thanks! :)

cottonball · 22 Mar 2013

webgal318,

Borg 386's idea to run TDSSKiller was a good one.

Rootkit.Boot.Harbinger.a is not good news. It is a type of malware that infects the Master Boot Record (MBR).

Please provide the TDSSKiller report as soon as you can.

Did you run TDSSKiller before using the Farbar Recovery Scan Tool?
If not, looks as if the FRST download link was not updated.

search.txt and FRST.txt

Rootkit Harbinger found

MSCONFIG print screens

TDSS killer logs