How can I see if I got rid off the volsnal virus?

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Masyanya, Jun 19, 2011.

  1. Masyanya

    Masyanya Private E-2

    Ok, I tried to go online *safe surfing* - got BSOD. Then I went to use that ESET scan - it found 0 threats. Meanwhile I hear all kinds of commercial audio broadcasts and plus I feel concerned that since I uninstalled Avast! I got no real time antivirus protection.
    So do you guys want me to install another antivirus (and what kind?) and do all those scans?
    Thank you very much for trying to figure out my situation, I am pretty much lost and curious what does my PC have. :confused
     
  2. Masyanya

    Masyanya Private E-2

    Thank you very much, Kestrel13!, but I fail to download that rar file (program) - something just blocks it from downloading. :(
     
  3. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Do you have your boot CD? Let's try this.

    You need to use your Windows XP CD to boot to the Recovery Console and run the fixmbr to clear a Master Boot Record infection that you have.

    You can read the below to help you do this:

    http://support.microsoft.com/kb/307654


    After running the fixmbr command then boot back to normal mode Windows and try running TDSSkiller now. Then attach the log. Also explain if you are still having any malware problems.
     
  4. Masyanya

    Masyanya Private E-2

    Thank you very much, Kestrel13!, for another idea. Just a couple questions from a dummy :) Do I need to create a boot CD? I do have Windows Recovery Console. I know how to get there when F8-ing my way to safe mode and then it gives me choice to go to Windows Recovery Console - is that the destination for me? And then if I choice that option, I get the next screen with the message: C:\WINDOWS Which Windows installation would you like to log onto? and looks like the answer I should type better be of one letter word.... Anyways, maybe it is not the way for me to go and maybe I do have to create a boot CD. From that link look like I have all the needed stuff - SP3, Windows XP. I was just not sure if I do need to create a boot CD? :confused
     
  5. Masyanya

    Masyanya Private E-2

    OK, a little update. When getting to the point when it asks me which Windows installation would you like to log onto? - from the microsoft link I could understand that it is usually 1, so I put it 1 (or am I understanding it wrong?), then I got a CAUTION message: CAUTION This computer appears to have a non-standard or invalid master boot record, FIXMBR may damage your partition tables if you proceed. And below: This could cause all the partitions on the current hard disk to become inaccessible. If you are not having problems accessing your drive, do not continue. Are you sure you want to write a new MBR?
    So... what should I do in my situation? Appreciate your further advice. Thank you.
     
  6. thisisu

    thisisu Malware Consultant

    This warning always appears when you try to fixmbr :)
    Kestrel13! wanted you to proceed
     
  7. Masyanya

    Masyanya Private E-2

    So... does it mean I should proceeed anyway? OK, thank you. I am trying to be careful. One of those users you know LOL
     
  8. thisisu

    thisisu Malware Consultant

    No problem. Yes, proceed anyway
     
  9. Masyanya

    Masyanya Private E-2

    I tried but after it told me that new MBR written I really didn't know how to get out of that and I shut down my PC but now I am back and I tried to run TDSkiller and I get same error message. So no changes for me. As about volsnap.sys I was curious yesterday I went to Windows foler and Win32 and the driver and there it was. So maybe it was corrupted somehow and maybe volsnap.sys is actually not a bad thing? Another thing. I downloaded and installed AVIRA yesterday - since I had no antivirus after unistalling Avast! - and scanned my PC and it says I have 1 hidden file but no infections. I am not sure what is going on with the whole thing but I know for sure - I cannot Skype anymore. What can that be?
     
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Boot back into the Recovery Console, and then type this:
    copy C:\WINDOWS\ServicePackFiles\i386\volsnap.sys C:\WINDOWS\SYSTEM32\DRIVERS\volsnap.sys

    Then reboot into normal mode.

    What issues are you still having. Are your sound issues fixed?

    My personal preference is MSE for XP.
     
  11. Masyanya

    Masyanya Private E-2

    exactly all the words after "type this": (with spaces in your phrase too?)
     
  12. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Yes.
     
  13. Masyanya

    Masyanya Private E-2

    Thank you very greatly, Tim (The Jedi) for your advice - guess what - everything seems to be working fine now! I got my sound back, even Skype started and although I didn't call my parents yet (10 hours difference) I believe it should be working, I have several music files on my PC - they all play, didn't try the games although I uninstalled Diablo but I am finally not hearing those stupid radio broadcasts! Wow - there was definitely in the system, I am sure it's way cleaner then it was and I don't have problems opening the websites - that is sweet indeed! Thanks to you all, Major Geeks, for your patient and efficient support. I will take a break before analyzing ... my other PC! ;):-D It's slightly newer but very slow and just might need some cleanup but we will do it later. I might buy myself a mug with your logo or anything like that, great job! :heart
     
  14. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    That is very good news. You can now do the Final Cleanup procedures I posted to you a while back. Hope all stays well. Safe surfing!! :)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds