sdra64.exe

Good day,
my son's computer got a few malware including a pesky sdra64.exe. I've tried couple of recommendations on the web but the malware keeps persisting.

I've used the instructions from previous posts and have already cleaned the system.

Can you help?

jk

 

Hi,
Following up with my previous email, downloaded all mg needed files and started the cleaning process. but now I have another problem
Here is what happended..

1- Followed all good practices (I thin w/o a mistake?)
2- Installed superanti spyware, see attached log
3- installed malware and followed instructions see attached log.
4- system bootup.
Both Superanti spyware and malware saw sdra64.exe and attempted to clean.

Now, I have a new probelm at normal startup or safemode when I login, it automatically logs me out. I tried disabeling option on safemode screen but it did not help.

I used Linux, zenwlak to hack into the laptop, and extract the logfiles for you review.

Thanks in advance,
Please advise?

 

Hi, its me again.
to MG : I am not sure if I am allowed to recommend anything. Please accept my appologies and delete content.

I was able to find a way around xp login and log off without recovery tool, using linux, zenwlak. I am a novice and try at your own risk.

1- Download the cd and brn the image on a cd
2- boot your PC with the CD. Linux will be up and running in no time
3- use the file system (look into "mnt" folder) on linux to find the registry folder on on your c: drive. C:\windows\system32\config
4- you will find the registry files "SOFTWARE". Use linux to rename the file from SOFTWARE to COPY_SOFTWARE_.JJJ (this your original) don't lose it.
5- You will find another file named SOFTWARE.BAK which sytem back up for your computer. make a duplicate for future use COPY_SOFTWARE.bak", and rename it to "SOFTWARE".

logout of linux, and reboot your computer. It should work.

Remeber, you can always go back and rename the files back to their original file name format and use windows xp recovery tool.

 

Thank you.
You are so correct. I did lose a lot of my links doing what I did (not recommended). I've since done a complete reinstall and armed the computer with mg recommended software AVG, Antispyware.

I'll downlaod you recommended link for future reference.

thank you for your reply

regards,
jk