Jump to content

Recommended Posts

This problem started last night, 2-3-12, HP Pavillion G7 notebook with windows 7 shutdown with the only warning being a quick message flashed on screen, to fast to read. Finnaly got it running again after using system restore but this morning had to start in safe mode. After talking with HP tech and doing another system restore back to an earlier date we got it running again in normal mode but could not get Avast running so uninstalled it and put in MSE internet security. After running MSE scan I found out what was causing the problem but MSE could not delete the files. What next?
Link to post
Share on other sites

Hi ozzie4 and Welcome to The PIT!

 

Start here in Safe Mode w/Networking if you have to...

Download > http://majorgeeks.co...ware_d5756.html and save it to your desktop. Double-click mbam-setup.exe and follow the prompts to install the program.

At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded, select Perform quick scan, then click Scan.

When the scan is complete, click OK, then Show Results to view the results.

Be sure that everything is checked, and click Remove Selected.

When completed, a log will open in Notepad. Please save it to a convenient location and post the results.

 

 

 

 

:geezer:

Link to post
Share on other sites

you have a rootkit that infects your MBR (master boot record). This can be difficult to remove and Malwarebytes alone won't do it.

Download TDSSkiller from another pc and put it on a thumb drive.

http://support.kaspe.../tdsskiller.exe

Put the drive into the infected pc and run TDSSkiller. Then you can try running malwarebytes but your best option other than wiping the drive totally (I personally recommend that) is to go to the HiJackThis forum and have somebody help you clean it up.

http://forums.pcpitstop.com/index.php?/forum/25-hijackthis-logs/

The problem is that with a rootkit, your pc has been compromised and you'll never be sure if it's totally clean, it's the reason I recommended low level format of your hard drive.

 

 

 

 

.

Edited by Joe C
Link to post
Share on other sites

Download HJT > http://www.trendmicro.com/ftp/products/hijackthis/HijackThis.exe and save it to it's own folder on your desktop. Open the program and select to "Do a system scan and save a log". DO NOT HAVE HJT FIX ANYTHING! When the scan finishes the log will open in Notepad...copy/paste the contents into a new thread that you start here > http://forums.pcpitstop.com/index.php?/forum/25-hijackthis-logs/

Wait for help there from one of the Trusted Advisors, as you can see they are quite busy but will get you taken care of. If you've run Malwarebytes, post that log in your new thread first, then your HJT log...

 

Luck to ya'!

 

 

 

 

:geezer:

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...