jbomx363

MrC....I'm totally clean and running as before. Thanks. Can close this thread.

Welp...took the time to download and run Kaspersky antivirus. Ran it 4 times and cleaned up a bunch of stuff. Then ran the tdsskiller. Then ran roguekiller. Then ran malwarebytes. Back to Kaspersky AV. Everything seems to be cleaned and free. Will run a couple of more times this week and see if anything shows up. No malware/trojans/zeroaccess and no longer getting redirects.

btw.. this is windows 7 enterprise, 64 bit system. I also tried renaming kss to .com and no luck...and I am running as administrator.

TDSSKiller will not run. Tried it in safe mode also. The process will show briefly in task manager.

Attached is the last system log (I have yet to get an mbar log) which I had to end the process on the kit as it was again, not responding. I noticed this: Partition information: Partition 0 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 2048 Numsec = 312467232 Partition 1 type is HIDDEN (0x17) Partition is ACTIVE. Partition starts at LBA: 312469504 Numsec = 20480 Partition is not bootable Infected: VBR on Hidden active partition --> [unknown Rootkit VBR Infection] I'm going to start again and let it run overnight and see how far it gets. system-log 4pm 11.26.txt

Thanks Maurice. Mr. C... I think I'll take a stab at removing this. I've tried to run mwb anti-root kit quite a few times and it will get to some certain point and then be "not responding", and will not continue on, so I cannot get a full scan and it will not make it to the cleanup part. I've tried running in safe mode also. It stops at random sectors, meaning it will sometimes go to sector 312483209 or 312481112 or whatever, then hang. Suggestions?

Thanks MrC. I'll reformat instead of try to clean it.

RogueKiller scan attached. RKreport1_S_11212012_02d0834.txt

Browser redirect issue. Without coming here first, I ran MWB and it didn't find anything. I then ran an eset scan and it came up with this: Operating memory a variant of Win32/Olmasco.AD trojan I reran microsoft client and it found nothing. Reran MWB's and nothing. Need the fix please! DDS files attached. dds.txt attach.txt