Jump to content

Free help from tech experts
Welcome to Geeks to Go forums. Create a FREE account now to gain access to all our features. Once registered and logged in, you will be able to create topics, post replies to existing topics, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. Best of all, registration and all assistance is 100% free! This message, and all ads will be removed once you have signed in.
Create an Account Login to Account

Google redirects , Olmarik.tdl4 and Sirefef.ch trojans


  • This topic is locked This topic is locked

#16
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,171 posts
You can buy DVD-R blank disk. That should be fine. I also have my written in DVD-R and it's working fine.
  • 0

Similar Topics: Google redirects , Olmarik.tdl4 and Sirefef.ch trojans     x


#17
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,171 posts
ONE NOTE BEFORE YOU BEGIN: You have very nasty infection! I would strongly advice you to backup all your important data from your system before you begin with the fix.

This malware tends to disable you whole system and let you with nothing. Please backup your date.
  • 0

#18
Psydream

Psydream

    Member

  • Member
  • PipPip
  • 22 posts
i have to load drivers cuz i cant see any there and i have 2 options one is restore your computer using a system image that you created earlier and the other one is what u said but i have to load the driver but i dont know what to load ^^ sorry for being stupid ^^
  • 0

#19
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,171 posts
Don't apologize please. We are in this together. If you didn't do anything jet can you please stop process now because I have new information on your infection.

Looks like you have latest TDL4 infection and there is one method we can try. Please confirm that you didn't do anything with Recovery disk jet.
  • 0

#20
Psydream

Psydream

    Member

  • Member
  • PipPip
  • 22 posts
ok i canseled this and restart my computer normally
  • 0

#21
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,171 posts
OK. Good.

Do the following:
  • Click on the Start button and then choose Control Panel.
  • Click on the System and Security link.

    Note: If you're viewing the Large icons or Small icons view of Control Panel, you won't see this link so just click on the Administrative Tools icon and skip to Step 4.
  • In the System and Security window, click on the Administrative Tools heading located near the bottom of the window.
  • In the Administrative Tools window, double-click on the Computer Management icon.
  • When Computer Management opens, click on Disk Management on the left side of the window, located under Storage.

    After a brief loading period, Disk Management should now appear on the right side of the Computer Management window.

    Note: If you don't see Disk Management listed, you may need to click on the |> icon to the left of the Storage icon.
Take a screen Shot of the Disk Management Window and attach the screen shot to your reply.

To do print screen follow these steps:

  • Press Alt and Print Screen button on your keyboard
  • Open Paint program
  • From the menu choose Edit then Paste
  • Now save the picture and attach it here for me.

  • 0

#22
Psydream

Psydream

    Member

  • Member
  • PipPip
  • 22 posts
Here you are ;

i had some problems ok now ^^

Attached Thumbnails

  • Disk Management.png

Edited by Psydream, 21 November 2011 - 07:28 AM.

  • 0

#23
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,171 posts
Can you please post one more print screen but please adjust columns so I can see all disks size. I don't see size for the first no-name disk.
  • 0

#24
Psydream

Psydream

    Member

  • Member
  • PipPip
  • 22 posts

Can you please post one more print screen but please adjust columns so I can see all disks size. I don't see size for the first no-name disk.

I thought that so i edited the previous post
  • 0

#25
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,171 posts
I need to go now but I'll post next step as soon as possible. Stay tunned :).
  • 0

#26
Psydream

Psydream

    Member

  • Member
  • PipPip
  • 22 posts

I need to go now but I'll post next step as soon as possible. Stay tunned :).

I also have to go so dont hurry
  • 0

#27
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,171 posts
For this step you will need another, clean, PC and two blank CD disks. You will burn this two tools on clean PC and then use this disks on your infected one. Here is steps you must take and please read them at least two time to get familiar with them.

Download FreeISOBurner to desktop
Download gparted-live-0.10.0-3.iso (115.1 MB) to desktop
Download Windows 7 32-Bit (x86) Recovery Environment

Create a bootable CD, 1 for Gparted and 1 for the Windows 7 Recovery Enviroment, from the ISO images. We will use FreeISOBurner you downloaded to do this.
  • Insert blank CD into CD burner
  • Start FreeISOBurner
  • Click Open button and load gparted file
  • Select burn speed 16x or less
  • Press Burn button
  • Having made the bootable CD set your system to boot from CD (Instructions)
  • Do this again and burn Windows 7 Recovery Environment on another blank CD
Now boot off of the newly created Gparted CD.

Posted Image
You should be here...
Press ENTER

Posted Image
By default, "do not touch keymap" is highlighted. Leave this setting alone and just press ENTER.

Posted Image
Choose your language and press ENTER. English is default [33]

Posted Image
Once again, at this prompt, press ENTER

You will now be taken to the main GUI screen below
Posted Image
According to your logs, the partition that you want to delete is 2 MB (PLEASE CHECK THIS TWO TIMES!)
Click the trash can icon to delete and then click Apply.

You should now be here confirming your actions:
Posted Image

Now you should be here:
Posted Image

Posted Image
Is "boot" next to your OS drive?

If "boot" is not next to your OS drive under "Flags", right-mouse click the OS drive while in Gparted and select Manage Flags

In the menu that pops up, place a checkmark in boot like the picture below:
Posted Image

Now double-click the Posted Image button.

You should receive a small pop up like this:
Posted Image
Choose reboot and then press OK.

Time for second disk

Now reboot and boot Windows 7 Recovery Environment CD and execute the following commands:

  • bootrec /FixMbr
  • bootrec /FixBoot
  • exit

Your system will boot now in Windows.

Download MBRCheck.exe to your desktop.
  • Be sure to disable your security programs
  • Double click on the file to run it (Confirm the UAC prompt)
  • A window will open on your desktop
  • if an unknown bootcode is found you will have further options available to you, at this time press N then press Enter twice.
  • If nothing unusual is found just press Enter
  • A .txt file named MBRCheck_mm.dd.yy_hh.mm.ss should appear on your desktop.
  • Attach that file.

  • 0

#28
Psydream

Psydream

    Member

  • Member
  • PipPip
  • 22 posts
Hello,

Everythink goes fine with gparted i deleted 2mb think checked everythink then i double clicked
the exit button reboot**** ok,after a short time it eject automaticly the cd so i just putted
the windows 7 when it eject my cd , last sentence was i think press enter to continuou well i put the cd and wanted to execute what you said i typed the 1st one and pressed enter its just restarted my pc and after a wil it say Press any key to boot from Cd or DVD well thats normal but then below that there was
BOOTMGR is missing
Press Ctrl+Alt+Del to restart
this was happening even without the cd in . What i have done ;s

Edited by Psydream, 22 November 2011 - 08:18 AM.

  • 0

#29
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,171 posts
OK. You need to boot Windows 7 Recovery Enviroment again and try to type two commands again.

Please press any button to boot this CD before you get

BOOTMGR is missing
Press Ctrl+Alt+Del to restart

  • 0

#30
Psydream

Psydream

    Member

  • Member
  • PipPip
  • 22 posts
Well im maybe an idiot , i still pressed any button before this and the ,msg showed up but this time it boot properly "Windows is load files ..." and the same think u said before showed up "System recovery options and this time i can see Windows 7 Home Prenium Size and location ok i executed the 2 commands , they where succesfully executed. i restarted and the same message appearing.

Edited by Psydream, 22 November 2011 - 09:04 AM.

  • 0


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured