anyrain Posted May 25, 2011 ID:433222 Share Posted May 25, 2011 This is my first time posting so please bare with me if I do something incorrectly.My computer has been infected with the windows recovery/hard drive error malware. It started with a trojan being found during my malwarebytes scan. I currently have a blank desktop and no files are showing as if I have lost all personal pictures/ music files etc.I ran the DDS and am attaching the file text as I have seen that being done on other forum posts. Also posting the malwarebytes log. Any help appreciated....DDS (Ver_11-05-19.01) - NTFSx86 NETWORKInternet Explorer: 8.0.6001.19048Run by Sammy at 20:27:06 on 2011-05-24Microsoft Link to post Share on other sites More sharing options...
Kenny94 Posted May 25, 2011 ID:433294 Share Posted May 25, 2011 Hi anyrain Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate. Stay with me until given the 'all clear' even if symptoms diminish. Lack of symptoms does not always mean the job is complete. Please download and run UnHide.exe by Grinler.Double-click unhide.exe to run the program. After running it, your files should reappear. Please let us know the result.Can you post the Attach.txt of the DDS scan tool? Link to post Share on other sites More sharing options...
anyrain Posted May 26, 2011 Author ID:433488 Share Posted May 26, 2011 I ran the program and it unhid the icons/programs. Here is the attach scan that I redid today. It says zip and attach but I am not sure how to do that. Sorry. Thank you for helping..UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.IF REQUESTED, ZIP IT UP & ATTACH IT.DDS (Ver_11-05-19.01).Microsoft Link to post Share on other sites More sharing options...
Kenny94 Posted May 26, 2011 ID:433620 Share Posted May 26, 2011 Hi anyrain Note: These instructions and script were created specifically for this user. If you are not this user, do NOT follow these instructions or use this script as it could damage the workings of your system. Download ComboFix from below:Combofix download* IMPORTANT !!! Place combofix.exe on your DesktopDisable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.You can get help on disabling your protection programs hereDouble click on combofix.exe & follow the prompts.As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed.Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.The Windows recovery console will allow you to boot up into a special recovery mode that allows us to help you in the case that your computer has a problem after an attempted removal of malware.With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement.ComboFix will now automatically install the Microsoft Windows Recovery Console onto your computer, which will show up as a new option when booting up your computer. Do not select the Microsoft Windows Recovery Console option when you start your computer unless requested to by a helper.Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see a message that says:The Recovery Console was successfully installed.Click on Yes, to continue scanning for malware.Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal. When finished, it shall produce a log for you. Post that log (C:\ComboFix.txt) in your next reply.Note:Do not mouseclick combofix's window whilst it's running. That may cause it to stall.---------------------------------------------------------------------------------------------Ensure your AntiVirus and AntiSpyware applications are re-enabled.--------------------------------------------------------------------------------------------- Link to post Share on other sites More sharing options...
anyrain Posted May 27, 2011 Author ID:433835 Share Posted May 27, 2011 Before I run this I wanted to let you know that I am now receiving clear scans from malwarebytes. Should I still use this? Link to post Share on other sites More sharing options...
Kenny94 Posted May 27, 2011 ID:433901 Share Posted May 27, 2011 If your still having problems as you mention in your first post, then yes. Link to post Share on other sites More sharing options...
Staff screen317 Posted June 6, 2011 Staff ID:437588 Share Posted June 6, 2011 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts