TDSSKiller blocked (fails at 80%): my solution

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by timrichardson, Apr 26, 2011.

  1. timrichardson

    timrichardson Private E-2

    I have an XP Virtual machine that got badly infected. TDSSKiller could not start, it kept failing at 80%. There are a lot of posts on this point at various forums. The rootkit stops the removal program. I tried a few anti-malware programs; none even detected it, let alone removed it (no doubt the work of the rootkit).
    I made a new clean virtual machine (XP install) and mouted the problem virtual disk as a second drive. TDSSKiller ran fine on the clean XP, and got rid of the infection on the second drive.
    Then going back to the first virtual machine, the drive was now clean.

    In real machines this would work, as long as you could move the physical drive to a clean Windows computer. Or maybe booting with a live Windows CD/DVD would do the trick , with TDSSKiller on a USB stick.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Thanks for sharing how you fixed your problem. Your is another way which is also a solution that works for many other forms of malware that can block getting started.

    What we have found is the below which is an easier solution since most people are not going to have the ability or desire to install VMs and mount drives.

    You can just boot to the Recovery Environment of Vista and Win 7 and run TDSSkiller from the command prompt which fixes the problem.

    With Windows XP, you can boot the Recovery Console and run fixmbr or you may also be able to still run TDSSkiller and fix it.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds