Can't remove virus even after I did an Erecovery

Discussion in 'Malware Help (A Specialist Will Reply)' started by mppd20, Dec 22, 2010.

  1. mppd20

    mppd20 Private E-2

    I have an Acer Aspire laptop. I got what I believe to be a rootkit virus causing redirects on Yahoo searches. I have scanned with Avira, Ad-Aware, Malwarebytes, etc and it does not appear on any of them. I did a erecovery on the computer and the virus lingers on. Any help at all would be greatly appreciated.
     
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Running this may just help.

    Go to TDSSKiller and Download TDSSKiller.zip to your Desktop

    • Extract its contents to your Desktop so that you have TDSSKiller.exe directly on your Desktop and not in any subfolder of the Desktop.
    • Now double click the TDSSkiller.exe file to run it ( if using Vista or Windows 7 do not double click on it but rather, right click and select Run As Administrartor.
    • Allow the application to run and a window will open showing that it is TDSSkiller from Kaspersky
    • Click Start scan
    • It will run rather quickly and will notify you of whether anything is found or not.
    • Follow the instructions to delete/quarantine if asks you what to do when if finds something.
    Whether an infection is found or not, a log file should be created on your C: drive ( or whatever drive you boot from) in the root folder named something like TDSSKiller.2.1.1_27.12.2009_14.17.04_log.txt which is based on the program version # and date and time run. Please attach this log to your next reply. (See: HOW TO: Attach Items To Your Post )

    Let me know how your machine is behaving now.

    But I would still like you to go through the the following procedures.

    READ & RUN ME FIRST. Malware Removal Guide

    Once done, attach the requested logs and I will ensure that no malware remains.
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Before getting into what Kestrel13! gave you....
    Did it occur to you that the problem could be outside of your PC? ;) Routers are frequently the source of DNS infection. If you have a router hooked up then you need to follow the instructions for your hardware and reset it to factory default settings. Normally there is a recessed push button type switch that needs to be held down for some number of seconds to do this. After resetting to factory defaults on your router, you will need to reconfigure the router for your network if you have made any changes to the default network setup.

    Make sure that after resetting the router to factory defaults that you also power cycle the router and also any cable or DSL modems that connect you to the internet.

    If you still have problems after resetting the router then you definitely need to continue with Kestrel13!'s instructions.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds