|
Posted by PA Bear [MS MVP] on January 11, 2008, 1:14 pm
If you were Registered and logged in, you could reply and use other advanced thread options
http://blogs.technet.com/antimalware/archive/2008/01/10/mbr-rootkit-virtool-winnt-sinowal-a-report.aspx
But it sounds more like one of the newer Vundo variants. In any event,
you're going to need expert assistance with this one.
Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.
Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware
When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**
If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/
Yasin Akkan wrote:
> Hello,
>
> I installed avast home edition to one of my friend's computer.
> After installation it asked me if I want to schedule a scan on boot (or
> something like it).I clicked yes.And later the computer asked to restart I
> clicked yes again. When it restarted bootscan appeared and it started to
> scan the files in the computer.
>
> Later it found a virus like "win32.xxx?". It asked me what to do. I
> choosed
> "erase". The program erased it and continued to search. After it finished
> searching I saw the indication that program is preparing for normal start
> and starting windows.But this screen freezed and did nothing for more than
> 5
> minutes. After that I closed the computer from the main button. When I
> started it again I could see my old desktop but when I clicked the
> shortcuts
> on it a warning appeared saying that these programs like iexplore.exe can
> not be started. I tried for other programs but they were not starting
> also.
> I could open the other files but could not start the "exe. files". I
> thought
> this roblem maybe because the wrong installation of avast. I tried to
> uninstall it but "program add and remove" application was not working too.
>
> I opened my computer in safety mode and managed to uninstall avast but the
> problem was still there. I thoughed to make a "system restore" and hardly
> managed to restore it to a previously recorded time. But the problem
> still
> there. I can not still reach any other applications like "msconfig" or
> "regedit" from run command.
>
> My friend says he also has no rescue disk to reinstall the OS.
> Can I solve this problem without reinstall the os?
> What could be the reason for this? The file I erased or shutting down the
> computer unproperly?
> And how can I solve this problem?
>
> Thanks.
> Yasin Akkan
| 
XML site map