download link for Windows defender offline

[herbc]

My parents have Windows XP and i am trying to find a download site to download Defender offline because their system has the babylon tool bar and the Trojan Aleriun or whatever it's called. My system is 64 bit so i am not sure how to go about burning a rescue disk. Any recommendations , i am planning to set their system to boot from the dvd but what rescue disk will work? Thanks everybody

 

[Dude]

herbc, it can be found here.
What is Windows Defender Offline?

I will let others with more knowledge on malware assist further

 

[Britton30]

We have a Brink tutorial for WDO. http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html#post1424613


Please download AdwCleaner:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Save to the desktop.

Close all open programs.
To run the program, right-click AdwCleaner.exe and select: Run as Administrator

Click on Search and confirm the prompt.
After the program finishes, a text file report opens.
Please post the content of the C:\AdwCleaner[Rx].txt in your reply.

 

[herbc]

Thanks guys, i will post the results of adwcleaner later when i get to use their computer . Much appreciated

 

[VistaKing]

Download TDSSKILLER


Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.

Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.

Click the Start Scan button.


Upload the log file : C:\TDSSKiller.[Version]_[Date]_[Time]_log.txt".

 

[cottonball]

herbc,

If the computer is infected with Alureon, please do not use Microsoft Security Essentials (MSE) or Windows Defender Offline (WDO) to remove it.

Have seen more computers that will not boot, than what I care to, and MSE or WDO was used. Not a good chemistry!

Since TDSSKiller has already been mentioned, please do the following when you run it:

When the TDSSKiller console opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System
Click: OK

Press: Start Scan

•If a suspicious object is detected by this program, the default action is Skip. Leave this action as is, and click on: Continue
•If malicious objects are found, they show in the Scan results.
Ensure Cure (the default action) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)

When done, the tool creates a log on the disk with the Windows Operating System, normally C:\


Logs have a name like:
C:\TDSSKiller.X.X.X_05.22.2013_15.31.43_log.txt

Please attach the TDSSKiller log in your reply.

 

[VistaKing]

Thank you cottonball for saying

herbc,

If the computer is infected with Alureon, please do not use Microsoft Security Essentials (MSE) or Windows Defender Offline (WDO) to remove it.

Have seen more computers that will not boot, than what I care to, and MSE or WDO was used. Not a good chemistry!

users here like to use WDO for rootkit removers

 

[cottonball]

If you read what the WDO advertises, taking care of several kinds of Rootkits is claimed.

Can't remember the name of the OP, but there was a thread in this forum that used WDO to remove Alureon, and could not boot afterwards.


If I got caught by a Rootkit, WDO would not even be on the reserve list. However, that is just my opinion, and I am not an expert of any kind or nature.

I'm sure WDO is a highly regarded program and very successful at removing certain types of malware.

 

[VistaKing]

I'm agreeing with you . It wouldn't be in my disc rack .

 

[herbc]

HOLY CRAP , guys, you don't know what i have been through, i have managed to go head to head with Malware from hell.

I couldn't seem to get their computer to work with Defender offline because even though it booted and loaded files, there was nothing showing on the screen,

Now i'm preparing to go back into battle, any new tips ?

The malware on their system keeps shutting off MSE and even wouldn't let me run scanners in safe mode. I did manage to load a dvd disk with programs like Rogue killer, SAS and Eset but they were not ISO files.

I clicked on the drive in Windows normal mode and ran them, what other programs are good for that nasty Trojan?

By the way i was in a battle to the death with this malware from hell that lasted until 5.30 am this morning , it overpowered me and finally managed to finish me off.


I will follow you tips on the previous page but wanted to mention TDSS found like 6 threats and even though i deleted them and restarted the machine it still has problems.

AdWcleaner also found a bunch of stuff and i deleted that also but still having problems.

Oh no, i did everything wrong, i tried to delete instead of skip, i will try to get online and post the logs this time.

 

[VistaKing]

Lets see if we could get a kaspersky rescue disc


Download



Download the ISO file onto a Clean PC along with the tool below


Download



On a clean PC try these steps

:ar: Run the downloaded file rescue2usb.exe.
:ar: On the Kaspersky USB Rescue Disk Maker window, click Browse... and select the iso image of Kaspersky Rescue Disk 10
:ar: Select the required USB device from the drop-down menu.
:ar: Click START.

Wait until the process is complete.

:ar: Click OK on the open window informing that Kaspersky USB Rescue Disk has been successfully created.

Plug the USB flash drive to the infected PC and boot from the USB

Boot your computer from Kaspersky Rescue Disk 10

Press any key to enter the menu.

In the start up wizard window that opens, select the graphic interface language using the cursor moving keys. Press the ENTER key on the keyboard.

Read carefully the license agreement of Kaspersky Rescue Disk. If you agree with all terms, press 1 on the keyboard. To reboot the computer, press 2. To shut down the computer, press 3.

Choose Kaspersky Rescue Disk. Graphic Mode loads the graphic subsystem.
Press [ENTER]

   Note

You don't have to use the USB flash drive tool you could just burn the rescue.iso file to a disc

 

[herbc]

Thanks, i will let you know how it turns out.

 

[cottonball]

@VistaKing,

What do you plan to do with the Kaspersky Rescue CD?
Haven't used it in a couple of years, and can't remember.

@herbc,

If you are infected with Alureon, the Master Boot Record (MBR) is normally altered by a Rootkit in a way that the infection will even survive a complete format of the hard drive.

Yesterday, when the computer would still boot, a little bit of patience and following some sound instructions as presented could have worked you through it, with our assistance. That is water under the bridge. However, if you plan to continue doing "your thing" in any way shape or form, please do not waste our time.

Where you are at right now, looks as if a damaged/corrupted Master Boot Record (MBR) precludes the Operating System from loading.

You need to fix the Master Boot Record before you can boot.

Need to load up the XP Recovery Console. Do you have a Windows XP CD?

 

[herbc]

@VistaKing,

What do you plan to do with the Kaspersky Rescue CD?
Haven't used it in a couple of years, and can't remember.

@herbc,

If you are infected with Alureon, the Master Boot Record (MBR) is normally altered by a Rootkit in a way that the infection will even survive a complete format of the hard drive.

Yesterday, when the computer would still boot, a little bit of patience and following some sound instructions as presented could have worked you through it, with our assistance. That is water under the bridge. However, if you plan to continue doing "your thing" in any way shape or form, please do not waste our time.

Where you are at right now, looks as if a damaged/corrupted Master Boot Record (MBR) precludes the Operating System from loading.

You need to fix the Master Boot Record before you can boot.

Need to load up the XP Recovery Console. Do you have a Windows XP CD?

You have got to be kidding me. Patience, patience? When you have time please review my threads from the beginning. You will quickly see that i had tons and tons of patience.

The problem was i had three or four different guys jumping in telling me contradictory information and then after trying every different method recommended to the T , nothing improved my system.

After following along step by step in two separate threads on two different subjects i got to the point of realizing this is going in circles, check for yourself , after running DDS as requested to start and following all the steps in order i , on day three was asked to run DDS again

So what did i do, i thanked everybody and respectively said i'm closing out my topic and if i found a solution to PumHijackHo i would report back with a fix in case someone else ran into the same problem.

Not shockingly, after i close out my topic one helper appears and tells me to do the exact same thing i did in my first post , run DDS again.

I have not asked for help with that topic since, yesterday i was very busy and needed a download link because i was going to be on my parents computer and wouldn't have net access.

I was not back home with net access till the following morning, yes all night working on it. I then see a post saying don't waste are time .

Thanks but no thanks guys

Take care

Herbc

 

[Britton30]

yup Herbc I think there were too many cooks in the kitchen too. Do let us know how it turns out.

 

[cottonball]

herbc,

Ahhh!!! Understand your frustration, particularly when there are too many cooks (4 already on this thread and 4 also on the previous thread!!)


And then on this thread, instructions are followed to a "T"...

Post #6, on WDO:
If the computer is infected with Alureon, please do not use Microsoft Security Essentials (MSE) or Windows Defender Offline (WDO) to remove it.

Post #10 Reply:
...couldn't seem to get their computer to work with Defender Offline...

Requested not to run WDO, but ran it anyway.

~~~~
Post #6, on TDSSKiller:
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)

Post #10 Reply:
...TDSS found like 6 threats and even though i deleted them...

Requested not to select Delete, but did it anyway.


Now, the computer will not boot.


Take care also, herbc.