Trojan in operating system & OS is disabled

Discussion in 'Malware Help (A Specialist Will Reply)' started by Starcatcher33, Jul 9, 2009.

  1. Starcatcher33

    Starcatcher33 Private E-2

    Alright I am running an AMD athlon dual core processor the AM2. I am using Windows Vista home premium with 2gb ram. Two days ago Bullgaurd said it stopped a malware. Yesterday I ran bullgaurd and found I had two trojans and a cookie. Spy bot search & destroy got the cookie, and Dr. Web Cure it got one trojan, but the other trojan when it was being removed gave me a blue screen - fatal error has occured windows has shut down to prevent further damage to the system and will reboot in 30 secs. Well, as you can imagine we hit that snag several times and finally got a black screen stating windows failed to load. The virus from what I got from Bullgaurd is that it is in the ram boot memory and at this time - I tried to get my system to run avast from usb drive but it won't do it. My system is to the point I have to keep checking the boot disk order, and I have tried to get it to boot from CD rom to try to repair windows using the windows cd. I don't know the trojan's name, but I have the file location and what the actual file is from bullguard. and I don't know where this file actually came from I don't recognize it. laura@atdmt[3].txt (yes I know it's one of my text files) and here is the rest of it <system>=C:\users\Laura\Appdata\Roaming\microsoft\windows\cookies
    I had managed to run registry mechanic and atf cleaner before the rebooting problem arose. I don't know computer code so hopefully that helps. If anyone can help me I would appreciate it. Thanks!
     
    Starcatcher33, Jul 9, 2009
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    We can't assist you unless you can get your system into a stable state. You should post in the software forum for assistance with your non-booting issue. Once you can get into your system, then you can return to this thread and follow these procedures:

    Please follow the instructions in the READ & RUN ME FIRST link given futher down and attach the requested logs when you finish these instructions.

    • If you have problems where no tools seem to run, please try following the steps given in the below and then continue on no matter what you find. You only need to try the TDSSserv steps if having problems getting scans in the Read & Run Me First. If TDSSserv is not found, just continue on with the READ & RUN ME.
    READ & RUN ME FIRST. Malware Removal Guide

    • If something does not run, write down the info to explain to us later but keep on going.
    • Do not assume that because one step does not work that they all will not.
    • After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
    Helpful Notes:

    1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

    2. If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware, Malwarebytes and Spybot ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
    3. If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.
    4. To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:

    Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.
    ​
     
    TimW, Jul 11, 2009
    #2
  3. Starcatcher33

    Starcatcher33 Private E-2

    Actually I ended up taking it into a local computer repair shop. The hard drives were lost. I had to purchase a new hard drive. My 500gb hd the circuitry on the bottom went out and seagate will replace it. THe other one where the trojan was - still is- is out of commession and is being sent to a data retreval place. I did try to do all the steps your read me first column had said the day before it happened and with lock - up and what not. Anyway problem solved I guess. Thanks for the help and I have copied the read me first area into notepad for future reference.
     
    Starcatcher33, Jul 16, 2009
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are quite welcome.....sorry to hear of the death of your hard drive.
     
    TimW, Jul 19, 2009
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds