[search redirect and a variant of Win32/Olmasco.AD trojan]

MrC....I'm totally clean and running as before.

Thanks.

Can close this thread.

[search redirect and a variant of Win32/Olmasco.AD trojan]

Welp...took the time to download and run Kaspersky antivirus. Ran it 4 times and cleaned up a bunch of stuff.

Then ran the tdsskiller.

Then ran roguekiller.

Then ran malwarebytes.

Back to Kaspersky AV.

Everything seems to be cleaned and free.

Will run a couple of more times this week and see if anything shows up.

No malware/trojans/zeroaccess and no longer getting redirects.

[search redirect and a variant of Win32/Olmasco.AD trojan]

btw.. this is windows 7 enterprise, 64 bit system.

I also tried renaming kss to .com and no luck...and I am running as administrator.

[search redirect and a variant of Win32/Olmasco.AD trojan]

TDSSKiller will not run. Tried it in safe mode also.

The process will show briefly in task manager.

[search redirect and a variant of Win32/Olmasco.AD trojan]

Attached is the last system log (I have yet to get an mbar log) which I had to end the process on the kit as it was again, not responding.

I noticed this:

Partition information:

Partition 0 type is Primary (0x7)

Partition is NOT ACTIVE.

Partition starts at LBA: 2048 Numsec = 312467232

Partition 1 type is HIDDEN (0x17)

Partition is ACTIVE.

Partition starts at LBA: 312469504 Numsec = 20480

Partition is not bootable

Infected: VBR on Hidden active partition --> [unknown Rootkit VBR Infection]

I'm going to start again and let it run overnight and see how far it gets.

system-log 4pm 11.26.txt

[search redirect and a variant of Win32/Olmasco.AD trojan]

Thanks Maurice.

Mr. C... I think I'll take a stab at removing this.

I've tried to run mwb anti-root kit quite a few times and it will get to some certain point and then be "not responding", and will not continue on, so I cannot get a full scan and it will not make it to the cleanup part.

I've tried running in safe mode also. It stops at random sectors, meaning it will sometimes go to sector 312483209 or 312481112 or whatever, then hang.

Suggestions?

[search redirect and a variant of Win32/Olmasco.AD trojan]

Thanks MrC.

I'll reformat instead of try to clean it.

[search redirect and a variant of Win32/Olmasco.AD trojan]

RogueKiller scan attached.

RKreport1_S_11212012_02d0834.txt

[search redirect and a variant of Win32/Olmasco.AD trojan]

Browser redirect issue.

Without coming here first, I ran MWB and it didn't find anything.

I then ran an eset scan and it came up with this:

Operating memory a variant of Win32/Olmasco.AD trojan

I reran microsoft client and it found nothing.

Reran MWB's and nothing.

Need the fix please!

DDS files attached.

dds.txt

attach.txt