Results of Windows Defender Offline Full Scan

[sbuxman]

Results of the Windows Defender Offline Full Scan:

Trojan:Win32/Dynamer!dtc Severe Active Remove
Exploit:Java/CVE-2012-1723.AQT Severe Active Remove
Trojan:Win32/Alureon Severe Active Remove

Providing the above per gregrocker in the General Discussion forum entitled, "Hp laptop startup issues.

 

[ICIT2LOL]

Hello sbuxman Mate have you actually removed these if not maybe try a scan with either Malwarebytes or SuperAntiSpyware? you may be able to clear those with those apps.

Malwarebytes : Free anti-malware download

SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

download the free versions and update scan and remove if they show up.

if you have got these already - sorry!

 

[sbuxman]

Hello sbuxman Mate have you actually removed these if not maybe try a scan with either Malwarebytes or SuperAntiSpyware? you may be able to clear those with those apps.

Malwarebytes : Free anti-malware download

SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

download the free versions and update scan and remove if they show up.

if you have got these already - sorry!

I chose "Remove" after the Windows Defender Offline Full Scan and was told that the removal had been successful for all three infections.

I can't run malwarebytes or SUPERantiSpyware because I can't get into Windows...still.

 

[Britton30]

Run WDO again to verify they were removed.

Then try http://www.sevenforums.com/tutorials/69585-safe-mode.html with networking.

 

[sbuxman]

Run WDO again to verify they were removed.

Then try http://www.sevenforums.com/tutorials/69585-safe-mode.html with networking.

Running it now...abt a 4-hr process, but what else to do?

 

[ICIT2LOL]

Before it goes any further what actually happens when you turn the power on? as you say you cannot get into Windows is that because it will not boot the OS or have you forgotten the login password - sorry but am stating the ruddy obvious to rule out all I can think of.

Otherwise mate maybe a long shot before you have to reinstall but do you have a friend (or another machine) who / that can make you a bootable Ubuntu CD? Because if you need data from that original install but as you say cannot get it to start Windows up then you can access the hard drive with that Ubuntu OS booted.

You need to make the bootable Ubuntu disk set your BIOS to boot from the optical drive and once in Ubuntu you can access what is on that drive and copy away whatever you need to keep - pics docs etc etc.

Now that sounds complicated but truly it isn't I always keep a bootable Ubuntu for fixes in particular when people forget their login password for example.

If this is the way you need to go I can give you some pointers ok?

 

[sbuxman]

Before it goes any further what actually happens when you turn the power on? as you say you cannot get into Windows is that because it will not boot the OS or have you forgotten the login password - sorry but am stating the ruddy obvious to rule out all I can think of.

Otherwise mate maybe a long shot before you have to reinstall but do you have a friend (or another machine) who / that can make you a bootable Ubuntu CD? Because if you need data from that original install but as you say cannot get it to start Windows up then you can access the hard drive with that Ubuntu OS booted.

You need to make the bootable Ubuntu disk set your BIOS to boot from the optical drive and once in Ubuntu you can access what is on that drive and copy away whatever you need to keep - pics docs etc etc.

Now that sounds complicated but truly it isn't I always keep a bootable Ubuntu for fixes in particular when people forget their login password for example.

If this is the way you need to go I can give you some pointers ok?

Fantastic! Thank you so much...doesn't sound really complicated at all. To answer your first question, it's not about any password...it will not boot the OS. I'm trying the full scan of WDO one more time, 4-hour process, and then I'll be ready for your pointers when all else fails.

Thank you!

 

[Britton30]

Run WDO again to verify they were removed.

Then try http://www.sevenforums.com/tutorials/69585-safe-mode.html with networking.

Running it now...abt a 4-hr process, but what else to do?

You could try the Safe Mode link I gave you, may not work, but is free.

 

[sbuxman]

Run WDO again to verify they were removed.

Then try http://www.sevenforums.com/tutorials/69585-safe-mode.html with networking.

Running it now...abt a 4-hr process, but what else to do?

You could try the Safe Mode link I gave you, may not work, but is free.

Still cannot get into Safe Mode with Networking...just when I think I'm there, the Startup Repair window starts up...takes over.

 

[ICIT2LOL]

Which sorta answers what I meant SB I was in two minds re what Britton said but wasn't sure if it booted anything at all.

Well my friend do you have any data you really need? If not try the repair if you do then we need to get that data onto something safe and well reinstall - I don't know what Britton thinks but I would be pleased for any suggestions.

If we go down the Ubuntu road I'll give you the map!!

 

[Britton30]

Have you tried running Startup Repair 3 times?

 

[sbuxman]

Have you tried running Startup Repair 3 times?

Yes, tried running Startup Repair three times at least...no soap.

Thought I had some hope when I was finally able to get to Safe Mode with Networking, but after tapping the F8 key, as soon as I get the Safe Mode menu and select Safe Mode with Networking, that screen goes blank within 3-5 seconds, on its own, and I'm back at the Startup Repair or Normal Startup screen...no control over it!

I think I'm inching closer to a clean install as the options to repair fall by the wayside one-by-one. On that note, the Digital River copy I used for the .iso file to create a full install boot disk of Win7 HP w/SP1 was for 32-bit, so I need to be pointed to that site again for the 64-bit, if someone would kindly do that for me.

Is there hope for saving some of the owner's files before/during the clean install? Ubuntu?

Thanks...ever hopeful.

 

[Jacee]

Your best bet would be to wipe and do a 'clean' install.

One of the Trojans (Trojan:Win32/Alureon) is described here ... notice "Bootkit/Rootkit"!
Alureon - Wikipedia, the free encyclopedia

Trojan:Win32/Dynamer!dtc ThreatExpert Report: Trojan.Gen.2, Trojan:Win32/Dynamer!dtc, Downloader.Delphi

Exploit:Java/CVE-2012-1723.AQT An Examination of Java Vulnerability CVE-2012-1723 | Symantec Connect Community

 

[Britton30]

Official Windows 7 SP1 ISO from Digital River « My Digital Life

 

[ICIT2LOL]

I know I keep on about it but did you need any data before you do what Britton and Jacee say? If you do now might be a good times to boot that Ubuntu and drag them off - pics docs etc

Let me know if you want to do that I'll run through it with you.

If not just go with that install mate. Personally I like to clean the drive up before I do that with subsequent installs - a bit pedantic I suspect but safe. Do that on the other machine with DISKPART or the Partition Wizard - if you want to - you do't have to.

Best Free Partition Manager Freeware and free partition magic for Windows 7, Windows 8, Windows Vista and Windows XP 32 bit & 64 bit. MiniTool Free Partition Manager Software Home Edition. < very handy tool to keep for future use.

http://www.sevenforums.com/tutorials/91339-ssd-hdd-optimize-windows-reinstallation.html < the DISKPART option

When you have that ISO on the stick then you will need to get that activation code from the sticker of the machine ready (I write it down to make easier reading) to put it in when you do the install. There is a tutorial on it but I can't find it right now.

See my pic for the sticker I mean - you probably know that but....

 

[sbuxman]

I know I keep on about it but did you need any data before you do what Britton and Jacee say? If you do now might be a good times to boot that Ubuntu and drag them off - pics docs etc

Let me know if you want to do that I'll run through it with you.

If not just go with that install mate. Personally I like to clean the drive up before I do that with subsequent installs - a bit pedantic I suspect but safe. Do that on the other machine with DISKPART or the Partition Wizard - if you want to - you do't have to.

Best Free Partition Manager Freeware and free partition magic for Windows 7, Windows 8, Windows Vista and Windows XP 32 bit & 64 bit. MiniTool Free Partition Manager Software Home Edition. < very handy tool to keep for future use.

http://www.sevenforums.com/tutorials/91339-ssd-hdd-optimize-windows-reinstallation.html < the DISKPART option

When you have that ISO on the stick then you will need to get that activation code from the sticker of the machine ready (I write it down to make easier reading) to put it in when you do the install. There is a tutorial on it but I can't find it right now.

See my pic for the sticker I mean - you probably know that but....

Thank you, thank you...since I was following gregrocker's tut about the clean install, I followed his lead about the Paragon Rescue Kit b/cit has a File Transfer Wizard in it. So I saved what I need to save, but still want to make a Ubuntu so I'll appreciate your pointers : )

 

[ICIT2LOL]

Ok sbuxman now the first thing thing you need is an app to burn the ISO / bootable disk and I usually use ImgBurn

The Official ImgBurn Website - don't be tempted EVER to download those addon free scanners / updaters / reg cleaners etc etc unless you know where they are form if unsure - ask in here as there will be plenty of folks - Greg in particular who will know most of that sort of stuff.

You can of course use the Windows burner if you like.

Next download and save the Ubuntu - I always use > Start > type downloads > right click on the ref that pops up in that column > send to desktop - easy to find then.

Desktop | Ubuntu download the 12.10 (32bit) look for and skip the payment bit it will say not now - the download takes a while to do so have a cup of coffee or a little lie down while it is doing that LOL!!

Once it is downloaded go to Downloads click on the Ubuntu it will open that Windows burn app I spoke of - just remember you will need a DVD not a CD as it is just a tad too big for a normal CD.

Burn away I can't remember offhand how long that takes but certainly no more than the download.

Once it is burnt - label it and then set the BIOS to boot from the optical drive - just like a Windows install.

It will ask if you want to try or install make sure you TRY not install.

That takes about two minutes depending on the system speed to load.

You will end up with a nice purple desktop and the thing with the Linux stuff is that it is sort of in reverse to Windows. For example the close cross is on the right. the cursor a dark grey or black, and shut down top right.

What I might do if it is ok with you while you are tied up with doing that I will boot one of my machines to Ubuntu and take some camera pics as I am not sure it has the snip feature.

But in any case this is a very useful tool for accessing drives and the net if the normal set up fails. It has Firefox as the default browser and you can set that to Google. This applies to any machine you or friends are stick with it is not limited to your machine because it is not ?"copyrighted" like Windows is if you get my drift.

I'll be back as soon as I can OK?

 

[ICIT2LOL]

Ok I will put them in the chronological order - it isn't a full set just the main "stops" I just hope they will all load if not I'll do a second batch. Anyqueries PM me or just post back.

Oh meant to say if you want all the Docs folder you can copy / paste it whole! not only as individual files. Plus you can download Speccy and stuff like that to see machine specs.

 

[jimbo45]

Results of the Windows Defender Offline Full Scan:

Trojan:Win32/Dynamer!dtc Severe Active Remove
Exploit:Java/CVE-2012-1723.AQT Severe Active Remove
Trojan:Win32/Alureon Severe Active Remove

Providing the above per gregrocker in the General Discussion forum entitled, "Hp laptop startup issues.

Hi there
I'm different to the rest here -- I'd NEVER try and repair the OS of an infected computer.

Only a COMPLETE fresh install or a disk format (the OS partition) or a restore of the last known virus free image.

(Since any sort of Virus protection can never be 100% sure why in the world do people assume that "cleansing processes" can be 100% effective either). - Is there ANY hospital on this planet that has a 100% cure rate. !!!).

Incidentally install MSE as well --this should give you more real time protection -- Windows defender on W7 is a bit of a joke unlike the humungously revamped security system on W8 now co-incidentally also called Windows defender.

Taking full OS image backups should be done as a matter of course -- especially before installing any new software or surfing "dubious sites".

Things like Acronis etc make bootable recovery disks (or even USB's -- IMO better than messing about with CD's / DVD's.

Re-install the OS and apps -- then take create a bootable USB. Save your image to an external USB drive -- don't waste time any more with physical CD's / DVD's.

If your computer can't boot from external usb device (would have to be quite an old machine) then you are stuck with making the bootable recovery program on a CD / DVD - but you can still save / restore the image to external USB drive.

Acronis will also create a bootable recovery cd for you without needing any extra cd burning application as well.

Incidentally keep OS and data partitions separate so when re-installing or recovering the OS partition you don't have to restore all your data as well.

Things like Partition Magic etc are also good tools to have when doing recoveries.

MSE gives you a screen like thios when you need to scan your computer (this screenshot is from the W8 windows defender) but the operation and screens are identical.



Cheers
jimbo

 

[ICIT2LOL]

Yeah jimboI agree but I was just out to save a few important files with my Ubuntu suggestion before he does that. I did mention PW early on in the piece as a method of wiping the drive.(post#15)