My parents have Windows XP and i am trying to find a download site to download Defender offline because their system has the babylon tool bar and the Trojan Aleriun or whatever it's called. My system is 64 bit so i am not sure how to go about burning a rescue disk. Any recommendations , i am planning to set their system to boot from the dvd but what rescue disk will work? Thanks everybody
herbc, it can be found here.
What is Windows Defender Offline?
I will let others with more knowledge on malware assist further
We have a Brink tutorial for WDO. Windows Defender Offline
Please download AdwCleaner:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Save to the desktop.
Close all open programs.
To run the program, right-click AdwCleaner.exe and select: Run as Administrator
Click on Search and confirm the prompt.
After the program finishes, a text file report opens.
Please post the content of the C:\AdwCleaner[Rx].txt in your reply.
Thanks guys, i will post the results of adwcleaner later when i get to use their computer . Much appreciated
Download TDSSKILLER
Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.
Click the Start Scan button.
Upload the log file : C:\TDSSKiller.[Version]_[Date]_[Time]_log.txt".
herbc,
If the computer is infected with Alureon, please do not use Microsoft Security Essentials (MSE) or Windows Defender Offline (WDO) to remove it.
Have seen more computers that will not boot, than what I care to, and MSE or WDO was used. Not a good chemistry!
Since TDSSKiller has already been mentioned, please do the following when you run it:
When the TDSSKiller console opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System
Click: OK
Press: Start Scan
•If a suspicious object is detected by this program, the default action is Skip. Leave this action as is, and click on: Continue
•If malicious objects are found, they show in the Scan results.
Ensure Cure (the default action) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)
When done, the tool creates a log on the disk with the Windows Operating System, normally C:\
Logs have a name like:
C:\TDSSKiller.X.X.X_05.22.2013_15.31.43_log.txt
Please attach the TDSSKiller log in your reply.
Thank you cottonball for saying
users here like to use WDO for rootkit removersherbc,
If the computer is infected with Alureon, please do not use Microsoft Security Essentials (MSE) or Windows Defender Offline (WDO) to remove it.
Have seen more computers that will not boot, than what I care to, and MSE or WDO was used. Not a good chemistry!
If you read what the WDO advertises, taking care of several kinds of Rootkits is claimed.
Can't remember the name of the OP, but there was a thread in this forum that used WDO to remove Alureon, and could not boot afterwards.
If I got caught by a Rootkit, WDO would not even be on the reserve list. However, that is just my opinion, and I am not an expert of any kind or nature.
I'm sure WDO is a highly regarded program and very successful at removing certain types of malware.
HOLY CRAP , guys, you don't know what i have been through, i have managed to go head to head with Malware from hell.
I couldn't seem to get their computer to work with Defender offline because even though it booted and loaded files, there was nothing showing on the screen,
Now i'm preparing to go back into battle, any new tips ?
The malware on their system keeps shutting off MSE and even wouldn't let me run scanners in safe mode. I did manage to load a dvd disk with programs like Rogue killer, SAS and Eset but they were not ISO files.
I clicked on the drive in Windows normal mode and ran them, what other programs are good for that nasty Trojan?
By the way i was in a battle to the death with this malware from hell that lasted until 5.30 am this morning , it overpowered me and finally managed to finish me off.
I will follow you tips on the previous page but wanted to mention TDSS found like 6 threats and even though i deleted them and restarted the machine it still has problems.
AdWcleaner also found a bunch of stuff and i deleted that also but still having problems.
Oh no, i did everything wrong, i tried to delete instead of skip, i will try to get online and post the logs this time.
Last edited by herbc; 23 May 2013 at 16:20.
Quote