i think my system is infected

maseeullah · Dec 26, 2008

Hi guys i am hoping you can help me

Recently I have been having trouble booting my computer in normal mode where I get the fatal blue screen error. I am able to boot into safe mode with the networking prompt, with no problems at all.

When i login in to safe mode I get an error saying I am not fully protected by Mcafee. I had a problem similar to this before but combofix sorted it and my computer was working fine.

I have read the read me first topic and followed it all.

Please find my logs attached

I hope you guys can help me

Thanks in advance

maseeullah · Dec 26, 2008

here is mglogs log

maseeullah · Dec 26, 2008

just a quick update guys I am ow able to boot into normal mode by stopping all startup programs. i have run spybot and it says i have a tdss rootkit problem. any solutions

TimW · Dec 28, 2008

The first thing I want you to do is this:

Click Start > Control Panel > System > Hardware > Device Manager > View > Show Hidden Devices.

* Scroll down to “Non-plug and Play Drivers” and click the plus icon to open those drivers.
* Then search for TDSSserv.sys
* Let me know if you find this or not.
* If you do find it, right click on it, and select Disable. Do not try to uninstall it.
* Also if this is found and you disable it, then reboot.

Now re-run the scans again ---> after uninstalling SAS and downloading the latest version.

Log in or Sign up

i think my system is infected

maseeullah Private E-2

Attached Files:

SASlog.txt

mbamlog.txt

ComboFix.txt

maseeullah Private E-2

Attached Files:

MGlogs.zip

maseeullah Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member