Possible malware infection

Page 1 of 2 12 LastLast

  1. Posts : 101
    Windows 7 Home Premium x64
       #1

    Possible malware infection


    Hey,

    I have been having problems with BSODs, and have been redirected to here from the BSOD subforum.
    Recent Bsods happening at random

    I have no idea what I should post or say here furthermore, but I do need help as it is a very big problem!

    Thanks in advance,
    Robert
      My Computer


  2. Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       #2

    Hi Robert

    Lets take a look at something

    Download DDS by clicking on the Download on the Table below

    No code has to be inserted here.

    Save the file onto your desktop. Right click on the dds icon and choose Run as administrator . On the Settings Window put a check mark in attach.txt and then click on the Start button

    Upload both of the logs " DDS.txt and ATTACH.txt " with your reply
      My Computer


  3. Posts : 2,470
    Windows 7 Home Premium
       #3

    robertju1,

    Also download RogueKiller:
    Tlcharger RogueKiller (Site Officiel)

    When you get to the website, go to where it says:
    (Download link) Lien de téléchargement:
    Select the version with the x64.
    Click the dark-blue button to download.
    Save to the Desktop.

    Close all windows and browsers.

    Right-click and select: Run as Administrator

    At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished.)
    Press: SCAN

    When done, a report opens on the Desktop: RKreport.txt

    Please provide the RKreport.txt (Mode: Scan) in your reply.
      My Computer


  4. Posts : 101
    Windows 7 Home Premium x64
    Thread Starter
       #4

    Done both, did take another DDS file from the internet as the link u provided doesn't work for me.

    With the RK, I scanned first, used the delete function after (the one beneatch scan) and the scan function afterwards again, that's why I attached 3 files for RK.
    Possible malware infection Attached Files
      My Computer


  5. Posts : 2,470
    Windows 7 Home Premium
       #5

    robertju1,

    Please run: aswMBR
    http://public.avast.com/~gmerek/aswMBR.exe
    Save it to the Desktop.

    >>Make sure your AntiVirus is temporarily disabled!!<<

    For information on how to disable protective programs, refer to this Info:
    How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - BleepingComputer.com

    Right-click aswMBR and select: Run as Administrator

    When promped with: This Application can use the Avast! Free AntiVirus for scanning...etc.
    Select: Yes

    The last line of the run in progress will provide the status of the Avast! scan.
    It will say: Downloading Avast! virus definitiond database, etc.

    When the Avast! scan is done, the last line changes to: Avast Engine definitions #####

    At this point, click the Scan button on the lower left of the aswMBR screen.
    The last line will now say "Scanning" while it is in progress.

    Upon completion of the scan, click >Save log< and save it to the Desktop.
    Note: Please do NOT attempt to fix anything!!
    Exit the program.

    Please post the aswMBR log in your reply.



    Also, notice that another file is created on the Desktop.
    It is named MBR.dat

    Please submit MBR.dat for analysis to VirusTotal:
    http://www.virustotal.com/
    https://www.sevenforums.com/tutorials/277740-online-scanners-scan-suspicious-files-your-pc.html

    If you get a message saying: 'File has already been analyzed', click: Reanalyze file

    Once scanned, and you see the full results page on your screen, go up to the address bar at the top of the browser, and copy the http:\\etc. address there.

    Then, provide the http:\\ address to the results page in your reply.
      My Computer


  6. Posts : 101
    Windows 7 Home Premium x64
    Thread Starter
       #6

    Hey, sorry for the late reaction, I was on vacation.

    I have tried to run aswMBR, in normal mode and in safe mode with network possibilities, but I get an error that the program has crashed in both ways. It is a normal windows error, aswMBR doesn't work anymore and there are no solutions, and then I had to click right under to exit the program.

    So this doesn't work, is there any other program that I can run which is alike?
      My Computer


  7. Posts : 2,470
    Windows 7 Home Premium
       #7

    Looks as if you are having a hard time obtaining information from which we can take action.

    Let's take a look before Windows starts…

    Do you have the Repair your computer option in the Advanced Boot Options menu?
    Don't want for you to run this option; just want to know if you have it!!

    To find out:
    Restart the computer.
    As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
    Is the Repair your computer option listed?

    If you do not have the option, do you have your Windows installation CD/DVD available?

    And last, do you have a USB flash drive available, and access to another computer that is not infected?
      My Computer


  8. Posts : 101
    Windows 7 Home Premium x64
    Thread Starter
       #8

    Yes, the repair your computer is listed. (the option on top and above safe mode)

    Also I do have an USB of 8gb available and acces to another computer that isn't infected yes.

    Also when I pressed f8, I first gain the option from which thing I would like to boot, my SATA or the CDrom, Afterwards I gain the advanced boot options.
    Last edited by robertju1; 04 May 2013 at 13:11. Reason: extra information
      My Computer


  9. Posts : 2,470
    Windows 7 Home Premium
       #9

    robertju1,

    You may want to print these instructions so you can have access to follow them.
    Also, you may want to read them once before you apply them.

    Please plug a USB flash drive into a clean computer.
    Go to Start > Computer
    Double-click Computer, and select the flash drive.
    Right-click and select: Format
    Press Start on the Format prompt.
    Remove when done.


    Now, go to the Farbar Recovery Scan Tool Download page.
    Select the 64-bit download.
    Save the program to the >> USB flash drive <<

    Next, remove the flash drive from the clean computer, and plug it into the problematic computer.

    >>>Restart.
    • As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Select your language settings, and click: Next
    • Select your User account and click: OK (If you did not set a password, leave blank.)
    On the System Recovery Options menu you get the following options:
    • Startup Repair
    • System Restore
    • Windows Complete PC Restore
    • Windows Memory Diagnostic Tool
    • Scan your computer's memory for errors.
    • Command Prompt
    Select Command Prompt
    • In the Command window, at the bliking cursor type notepad and press: Enter
    • In Notepad, under the File menu select: Open
    • Double-click Computer, find the flash drive letter, remember what letter it is, click on it, and press: Open
    • Close out of Notepad.
    • Click the Command Prompt window
    • Type g:\frst64.exe, and press: Enter
      Note: Replace the drive letter g with the drive letter of your flash drive!
    • The tool starts and prepares to run. Follow the prompts.
    • Click Yes to the disclaimer.
    • Press: Scan
    When done scanning, the program saves a FRST.txt report on the flash drive.

    Close Notepad, then, click the Command prompt window, and type exit, and press: Enter
    Remove the USB flash drive.
    Back at the System Recovery Options, press: Shutdown

    Please provide the FRST.txt in your reply.
    It is located in the USB flash drive.
      My Computer


  10. Posts : 101
    Windows 7 Home Premium x64
    Thread Starter
       #10

    Did all your steps and attached the text file!
    Possible malware infection Attached Files
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:30.
Find Us