WINCODECPRO Rootkit

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by BanjomanCO, Nov 2, 2009.

  1. BanjomanCO

    BanjomanCO Private E-2

    I ran all your standard procedures, eliminated the symptoms of WINCODECPRO, but it looks like there is a nasty Master Boot Record Rootkit on one of my drives. What now? I've attached the logs, and found RootRepeal interesting. I just noticed that the directory for Combofix contains the listing of the drives that I have, instead of Combofix files... Hmmm reformat time?
     
    Last edited: Nov 2, 2009
    BanjomanCO, Nov 2, 2009
    #1
  2. BanjomanCO

    BanjomanCO Private E-2

    Not doing well on attachments. Try again.
     

    Attached Files:

    BanjomanCO, Nov 2, 2009
    #2
  3. BanjomanCO

    BanjomanCO Private E-2

    That looked better. Here's more.
     

    Attached Files:

    BanjomanCO, Nov 2, 2009
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    It's possible but I don't think so. I believe that RootRepeal just does not understand how your drive F is partitioned/Formatted. Your drive may just use a non-standard boot record. Was this drive setup using any special configuration software? Is this an external disk drive? Was this drive ever used as a boot drive?

    Are you currently experiencing any problems? Other than what has already been cleaned up, your logs are clean. The only problem I see is that you have no antivirus program and need a real firewall.

    You do need to move ComboFix.exe to your Desktop as the instructions specified or later instructions will not work. You currently have ComboFix here:
    Running from: c:\documents and settings\Chris Bart\My Documents\Downloads\ComboFix.exe

    Huh?
     
    Last edited: Nov 6, 2009
    chaslang, Nov 6, 2009
    #4
  5. BanjomanCO

    BanjomanCO Private E-2

    Excellent response. Thanks. I am currently clean on everything, and am wondering what a good firewall would be, since we agree that Windows isn't really providing one...
     
    BanjomanCO, Nov 7, 2009
    #5

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds