Jump to content

Infected with HDD Plus


l3eater

Recommended Posts

One of my older computers got infected with HDD Plus. I followed a tutorial to remove the program from beepingcomputer.com, which included running the Rkill.exe program. When I tried to open Malwaebytes, a pop-up (related to HDD Plus) kept on appearing saying that the Harddrive is corrupt and the program will not execute.

I opened taskmanager and on the times that the pop-up does not appear, the MBAM process appears for a few seconds then disappears. I'm thinking that HDD Plus is stopping the execution of MBAM.

As well, on another thread related to HDD Plus, I ran the OTL program and the logs are attached.

OTL.Txt

Extras.Txt

Link to post
Share on other sites

Hello l3eater! Welcome to Malwarebytes' Anti-Malware Forums!

My name is Borislav and I will be glad to help you solve your problems with malware. Before we begin, please note the following:

  • The process of cleaning your system may take some time, so please be patient.
  • Follow my instructions step by step if there is a problem somewhere, stop and tell me.
  • Stay with the thread until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  • Instructions that I give are for your system only!
  • If you don't know or can't understand something please ask.
  • Do not install or uninstall any software or hardware, while work on.
  • Keep me informed about any changes.

  • Run OTL.exe
  • Under Custom Scans/Fixes post the following script:

:files
C:\WINDOWS\*.tmp
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\System32\drivers\*.tmp
C:\Documents and Settings\Ryan\Desktop\HDD Plus.lnk
C:\Documents and Settings\Ryan\Local Settings\Temp\358046.exe
C:\Documents and Settings\Ryan\Local Settings\Temp\tGlvsQfDnr.exe
C:\Documents and Settings\Ryan\Start Menu\Programs\Startup\PowerReg Scheduler.exe

:Commands
[purity]
[emptytemp]
[emptyflash]

  • Then click the Run Fix button at the top
  • Let the program run unhindered,when it is done it will say "Fix Complete press ok to open log"
  • Please post that log in your next reply.

Link to post
Share on other sites

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.