Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

HELP! Ultradefragger and trojan.Gen.2 removal [Closed]


  • This topic is locked This topic is locked

#91
rdbadger

rdbadger

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 107 posts
picture as requested!
  • 0

Advertisements


#92
rdbadger

rdbadger

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 107 posts
pic attached

Attached Thumbnails

  • pic of screen rootkit.jpg

  • 0

#93
rdbadger

rdbadger

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 107 posts
mmmm what does this mean? ...and what to do next!
  • 0

#94
rdbadger

rdbadger

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 107 posts
mmmm computer has been sitting on running g-parted for three days now! haven't turned it off cause waiting for next instructions!
  • 0

#95
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Hi and sorry for the delay. Please carefully follow instructions below:

Please boot back into the GParted CD, and navigate back into the main GUI screen below

Posted Image

According to your logs, the partition that you want to delete is 10,33 MiB

Please select the partition of that size. Click the trash can icon to delete that partition, and then click Apply.

You should now be here confirming your actions:
Posted Image

After clicking Accept, you should be at the following screen:
Posted Image

Posted Image

Under "Flags", Right-click the 74,52 GiB while in GParted and select Manage Flags

In the menu that pops up, place a check mark in boot like the picture below:
Posted Image

Now double-click the Posted Image button.

You should receive a small pop up like this:
Posted Image
Choose reboot and then press OK.
  • 0

#96
rdbadger

rdbadger

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 107 posts
do I take out the disk for the reboot or leave it in to go back to g-parted??
  • 0

#97
rdbadger

rdbadger

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 107 posts
....actually it told me to take the disk out! ...so next!
  • 0

#98
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
OK. Are you able to boot into Windows?
  • 0

#99
rdbadger

rdbadger

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 107 posts
Yep booted into windows
  • 0

#100
rdbadger

rdbadger

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 107 posts
NMIndex warning came up (surprise surprise!) and it is still pretty slow - also there is still windows updates warning, but i don't know how that can be?
  • 0

Advertisements


#101
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Let's see now if aswMBR will run:

Delete your old aswMBR.exe

  • Please download aswMBR.exe to your desktop.
  • Double click the aswMBR.exe to run it.

    Posted Image
  • When asked if you want to download Avast's virus definitions please select Yes.
    Note: If avast! antivirus is already installed, just do the next step.
  • Click the Scan button to start scan.

    Posted Image
  • On completion of the scan click Save log, save it to your desktop and post in your next reply.
  • Also on Desktop there should be a file called MBR.dat after that, zip it and then attach it here

How to add an attachment to a new topic or reply
  • 0

#102
rdbadger

rdbadger

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 107 posts
ok...don't have internet on there yet, but will get on to it - have to leave for work now!
thanks
  • 0

#103
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
OK.
  • 0

#104
rdbadger

rdbadger

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 107 posts
aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-06-04 19:34:42
-----------------------------
19:34:42.562 OS Version: Windows 5.1.2600 Service Pack 3
19:34:42.562 Number of processors: 2 586 0x209
19:34:42.562 ComputerName: ROANNA-36A94C04 UserName: Roanna
19:34:43.390 Initialize success
19:36:00.703 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
19:36:00.703 Disk 0 Vendor: ST380215A 3.AAD Size: 76319MB BusType: 3
19:36:00.734 Disk 0 MBR read successfully
19:36:00.734 Disk 0 MBR scan
19:36:00.734 Disk 0 Windows XP default MBR code
19:36:00.734 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 76308 MB offset 63
19:36:00.734 Disk 0 scanning sectors +156280320
19:36:00.828 Disk 0 scanning C:\WINDOWS\system32\drivers
19:36:17.031 Service scanning
19:36:44.343 Modules scanning
19:37:04.156 Disk 0 trace - called modules:
19:37:04.171 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys intelide.sys PCIIDEX.SYS
19:37:04.171 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x823839c0]
19:37:04.171 3 CLASSPNP.SYS[f8582fd7] -> nt!IofCallDriver -> \Device\00000066[0x8235cf18]
19:37:04.171 5 ACPI.sys[f84f9620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x8235e300]
19:37:04.187 Scan finished successfully
19:38:04.875 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Roanna\Desktop\MBR.dat"
19:38:04.890 The log file has been saved successfully to "C:\Documents and Settings\Roanna\Desktop\aswMBR.txt"

Attached Files

  • Attached File  MBR.zip   499bytes   119 downloads

  • 0

#105
rdbadger

rdbadger

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 107 posts
I can't get access to my firewall to tell if it has been turned back on - it says "due to an unidentified problem, Windows can't display Windows Firewall settings" - what should i do - I am not willing to connect internet until i know this is working - I don't want to have to start from scratch!!
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP