RogueFake.hdd

mjsully123 · Jan 9, 2012

Hello,
clicked on something, bunch of windows started popping up saying computer needed to be cleaned. tried to restart computer and then all menus and desktop was blank. Now BSOD with the message:

stop:c0000135 {unable to locate component}
Failed to start because winsrv was not found. reinstalling the application may fix this problem

Anything I can do at all about this? had a lot of picture on this computer

Help
Mike

TimW · Jan 10, 2012

We cannot help you with malware removal until you can boot to a stable system. Once you are able to do that, start a new thread in the malware forum. If someone in software can get you up and running, then first do this:

Please download and save the below tool from Grinler @ bleepingcomputer to your Desktop or anywhere else you can find it ( if the Desktop is not showing )

http://download.bleepingcomputer.com/grinler/unhide.exe

Now run it. Now see if you can find the items that seemed to be missing?

thisisu · Jan 10, 2012

http://img827.imageshack.us/img827/1263/frst.gif For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

Restart the computer.

As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.

Use the arrow keys to select the Repair your computer menu item.

Choose your language settings, and then click Next.

Select the operating system you want to repair, and then click Next.

Select your user account and click Next.

On the System Recovery Options menu you will get the following options:

Startup Repair

System Restore

Windows Complete PC Restore

Windows Memory Diagnostic Tool

Command Prompt

Select Command Prompt
In the command window type in notepad and press Enter.
The notepad opens. Under File menu select Open.
Select "Computer" and find your flash drive letter and close the notepad.
In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.
The tool will start to run.
When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) on the flash drive. Please attach this log to your next reply. (How to attach)

Log in or Sign up

RogueFake.hdd

mjsully123 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

thisisu Malware Consultant