[Jasmyne]

I've got the folders in the OTL fix that should remove what's on your computer. Many times rogue programs can't be found in the program list to uninstall like regular software.

[Advertisements]

Okay. i will continue with TDSSKiller download and execution then..

[Monvishi]

Okay. i will continue with TDSSKiller download and execution then..

[Monvishi]

While running the TDSS scan post rebooting from loading of modules, the system showed a blue screen with dumping physical memory and is rebooting again.

Is this expected? Or an hindrance? I will continue to try running the scan again..

What should be done if this repeats?

[Jasmyne]

If you're in normal mode, try again in safe mode, if it is happening in both let me know and we will find a different method of removal.

[Monvishi]

System rebooted and went to blue screen directly. Now trying to get it in safe mode but have a black screen reading ' Primary master hard disk error'. Press F1 to resume'

Should I do F1?

[Jasmyne]

Let me ask before I tell you either way.

[Monvishi]

Okay. I am holding on to the black screen with 'Primary Master Hard Disk Error' until further instructions..

[Jasmyne]

This is not something we normally see with TDSSKiller so if you have access to another computer and an USB drive, let's get a look at what is going on from outside of Windows.

For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
• Use the arrow keys to select the Repair your computer menu item.
• Select English as the keyboard language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account an click Next.

To enter System Recovery Options by using Windows installation disc:

• Insert the installation disc.
• Restart your computer.
• If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
• Click Repair your computer.
• Select English as the keyboard language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account and click Next.

On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt[*]Select Command Prompt
[*]In the command window type in notepad and press Enter.
[*]The notepad opens. Under File menu select Open.
[*]Select "Computer" and find your flash drive letter and close the notepad.
[*]In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.
[*]The tool will start to run.
[*]When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.[/list]

[Monvishi]

I do not have another computer. Just the iPad.
What will be the consequences if we proceed with F1?

Edited by Monvishi, 19 July 2013 - 12:05 PM.

[Jasmyne]

Go ahead with the F1 to continue. Then see if you are able to access a command prompt.

[Monvishi]

I have a black screen now with a cursor blinking.

Edited by Monvishi, 19 July 2013 - 12:25 PM.

[Monvishi]

Does this look bad?

[Jasmyne]

Does this look bad?

Yes and no. It's never good when any computer doesn't boot the way it's supposed to. That said, we deal with infections that that render computers unbootable regularly. This now appears to be something that is newer so it may take some trial & error to get things going they way they should be. While this is all fairly new to me, my instructor, Essexboy, has been doing this for quite some time and is excellent at what he does and I don't post anything to you with his prior approval. I've posted back to him & I'm waiting to hear back. Just in case it might of help, do you have a Windows disk?

Thank you for your patience,

Jasmyne

[Monvishi]

I don't have a Windows disk. The version came pre-installed.
I hope we are able to crack this, me getting tensed now as its my first time in this situation.
The system stands in the grey/ black screen with the cursor line blinking. I will not touch or do anything till I hear from you.

[Jasmyne]

I don't have a Windows disk. The version came pre-installed.

Most do these days. I was just checking because occasionally people do.

I hope we are able to crack this, me getting tensed now as its my first time in this situation.

I understand. I've been there before and at the time was HORRIBLE at keeping backups.

The system stands in the grey/ black screen with the cursor line blinking. I will not touch or do anything till I hear from you.

Sounds like a plan. I know what I would do if it was my computer I was sitting in front of here at the house, which I've posted for him, but I'm going to wait on his okay before posting here. I will be around so I will post to you as soon as I hear from him.