Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Smitfraud-C.generic [Closed]


  • This topic is locked This topic is locked

#46
myrti

myrti

    Expert

  • Expert
  • 2,580 posts
Hi,

ok, please download kubuntu then: http://www.kubuntu.o...s/11.10-release Instructions on how to create a CD/Flash drive are linked half way down. Choose whichever you prefer.

regards myrti
  • 0

Advertisements


#47
James Brady

James Brady

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts
Hello, when I try to boot off the flash drive it says..

"Could not find kernel image: linux"
"boot:"

I also tried with "LinuxLive USB Creator", as opposed to "netbootin", and I got a blue Kubuntu screen with four options on it.
-Live Mode
-Install
-File integrity check
-Memory test

not sure what to do with it now.
  • 0

#48
myrti

myrti

    Expert

  • Expert
  • 2,580 posts
Hi,

select live-mode. That should bring you to a desktop.

There press alt+f2 and a small window will open where you can type in the program you want executed.

In that window type konsole. That will open the command line.

type dd if=/dev/sda of=MBRbackup.zip bs=512 count=1 into the command line window.

This will create a file called MBRbackup.zip in your home directory. Either upload this directly from the live-cd to this thread (if you have an internet connection).
Or attach a flash drive (it should be recognised automatically by Kubuntu) and transfer the file from your home directory onto your flash drive.

regards myrti
  • 0

#49
James Brady

James Brady

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts
Ahh, got it, I had to type "sudo" before the command line though.

Attached File  MBRbackup.zip   512bytes   39 downloads

here's le` file
  • 0

#50
myrti

myrti

    Expert

  • Expert
  • 2,580 posts
Hi,

that looks clean so far. Is Spybot still showing the infection in svchost.exe?


Download this file: http://noahdfear.net...oads/udriver.sh
Open Konsole and type in cd Downloads. Type in ls. Make sure you see udriver.sh
Then type bash udriver.sh and press enter.
When done, post me report.txt which will be created in the same folder as udriver.sh.

regards myrti
  • 0

#51
James Brady

James Brady

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts
Spybot doesn't show the svchost.exe infection anymore, just those five cookies still.

Here's the report:

Attached File  report.txt   29bytes   42 downloads
  • 0

#52
myrti

myrti

    Expert

  • Expert
  • 2,580 posts
Hi,
that is the file as it was created? I think there may be a bug.


But since the alarm is no longer appearing in any case, I think we're chasing a ghost that is no longer there. As said those cookies are from big advertisement networks, you will get them almost instantly when you almost any given webpage. You can configure your browser to no longer accept cookies if that bothers you. (However that will eman that you also can't stay logged in here any more, for example)

regards myrti
  • 0

#53
myrti

myrti

    Expert

  • Expert
  • 2,580 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP