Malware scans are an essential ,imho, part of your machines maintenance. I use Malwarebytes and SuperAntispyware at least once a week if not more often. You should get into the habit of regular scans with your A/V also, it will save you a lot of trouble in the long run.
@jumanji,
"Over to the experts here."
Experts????? Not this old dog...learn something new every day.
@Flippylumpy,
Next...
A new RKreport.txt opens on your Desktop.
- Close all open windows and browsers
- Right-click RogueKilller and select: Run as Administrator
- Wait for the PreScan to finish.
- Press:Delete
Please provide the RKreport.txt (Mode: Delete) in your reply.
~~~~
Also, let's use unhide.exe to see if we can reveal Files and Folders hidden by the infection...
Download unhide.exe:
http://download.bleepingcomputer.com/grinler/unhide.exe
Save to the Desktop.
Double-click on the Unhide icon to run the program.
When done, the program displays an alert stating that your files are restored.
Reboot your computer for the settings to go into effect.
~~~~
There is a program that provides a means of securing USB drives, memory cards, external hard drives, etc., and is designed to prevent infections transmitted via removable drives. It is called MCShield. (This program has no association with McAfee.)
Let's see if it helps...
First, unplug the external HDD.
Next, download MCShield:
MCShield ::Anti-Malware Tool::
Save to the Desktop.
Double-click the MCShield-Setup to install the program.
Follow the prompts.
Once at the program console, click Run for MCShield to finish its initial scan.
Under the General and Scanner tabs, use the defaults items already checked.
Click: OK
Plug in your USB storage device to the computer (only one device at a time).
Scanning is done automatically. (Uses a heuristic engine to detect and neutralize threats in real-time.)
When done, a report is created.
The report can be found by going to: Start > All Programs > MCShield > Logs
If any malware is found, please post the McShield report in your reply.
Is the external hard drive visible again again?
Last edited by cottonball; 14 Mar 2013 at 11:04.
Expert is a relative term. Anyone who knows something more than me in a specified topic gets an Expert tag . By that criterion anyone who preaches here in this sub-forum is an Expert. :) ( I am not and that is why I diverted the OP here.)
Yep, all experts need to learn and that is a continuous process. Unless he learns himself, he cannot preach. :)
In the parent thread from which I diverted the OP here, I recommended WinRAR to see the hidden/superhidden files.
When the need to unhide those arose, I had half-a-mind to recommend Unhide, but since I myself did not learn using it, I did not want to. I recommended the conventional commands to unhide. See how learning makes a difference.:)
@jumanji,
You taught me something new. Never thought of using WinRAR for this purpose....recommended WinRAR to see the hidden/superhidden files
It is great when different minds work together to solve a problem.
Soon enough FlippyLumpy will be an expert.
Yep we all learn from each other - life is good!
I'll step back and watch the real experts - if cotton & jumanji can't find a resolution, I'll jump back in.
Good luck Flippy - you're in good hands.
Bill
.
@Cottonball
Sorry for the late reply, here's the new Rkreport.txt
RKreport[3]_D_03152013_02d2109.txt
I also did the unhide.exe and after following all your steps, I installed the MCshield program, set things into default. After plugging my ext.Hd, MCshield didn't do any automatic scan and still my ext.HD won't be visible on My Computer and Device Manager.
@Slartybart
yeah I hope so, haha. Thank you sir!
Hmmmm....
Go to Start > Computer
Right-click Computer, and select: Manage
In the Computer Management window, click on Disk Management (under Storage)
Does the external HDD show there?
@Cottonball
Umm as I mentioned on my previous post, it doesn't show there. What should i do next?
In Disk Management, do you see any unallocated space?
If so, what is the size?
Is this the External HDD that RogueKiller sees:
+++++ PhysicalDrive1: TOSHIBA External USB 3.0 USB Device +++++
--- User ---
[MBR] aa015c32ffb1e9c0ff66fd475fdef3b6
[BSP] e5423c156306790658c93a7a5d034be1 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 953867 Mo
Is the external hard drive bootable?
Last edited by cottonball; 18 Mar 2013 at 08:20.
One more time, with the external HD plugged in:
A new RKreport.txt opens on your Desktop.
- Close all open windows and browsers
- Right-click RogueKilller and select: Run as Administrator
- Wait for the PreScan to finish.
- Press: Shortcut Fix
Please provide the RKreport.txt (Mode: Shortcut Fix) in your reply.
Quote