Help
Attached File(s)
-
RootRepealNov17.txt (43.19K)
Number of downloads: 1
This post has been edited by CatByte: 17 November 2011 - 12:01 PM
Reason for edit: email addy removed
Forum Guidelines
Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help
Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient. DO NOT RUN ComboFix unless requested to. Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log. When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc. Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
Page 1 of 1
- You cannot start a new topic
-
This topic is locked
Need rootkit log analyzed to know which hidden files to remove
#1
- New Member
-
- Group: Members
- Posts: 2
- Joined: 23-January 11
Posted 17 November 2011 - 11:27 AM
I'm a complete novice in dealing with these problems. I have an empty desktop, programs and everything else is hidden but I know it is still there. I have been able to get into some things through the Panda security mini icon left on the bottom left of my screen. I was blocked when I tried to remove the previous Malwarebytes program in order to install the new Malwarebytes to run. I have now run RootRepeal and I don't know how to read the log showing hidden files and determine which ones need to be removed. I appreciate any help
Back to top
#2
- Bleepin' curls!
-
- Group: Malware Response Team
- Posts: 7,860
- Joined: 09-November 08
- Gender:Not Telling
- Location:Canada
Posted 17 November 2011 - 12:02 PM
Please do the following:
Please download Unhide.exe to your desktop:
NEXT
Please download DDS from either of these links
LINK 1
LINK 2
and save it to your desktop.
Please include the contents of the following in your next reply:
DDS.txt
Attach.txt.
NEXT
Please download aswMBR to your desktop.
Please download Unhide.exe to your desktop:
- Double-click on the Unhide.exe icon on your desktop and allow the program to run.
- This program will remove the hidden attributes from all the files on your system.
- Note: If you had purposely hidden any files, then you will need to hide them again after this tool has run.
NEXT
Please download DDS from either of these links
LINK 1
LINK 2
and save it to your desktop.
- Disable any script blocking protection
- Double click dds to run the tool.
- When done, two DDS.txt's will open.
- Save both reports to your desktop.
Please include the contents of the following in your next reply:
DDS.txt
Attach.txt.
NEXT
Please download aswMBR to your desktop.
- Double click the aswMBR.exe icon to run it
- When asked if you want to download Avast's virus definitions please select Yes.
- Click the Scan button to start the scan
- On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.
The help you receive here is free. If you wish to show your appreciation, then you may 
Microsoft MVP - 2010, 2011
Microsoft MVP - 2010, 2011
#3
- Bleepin' curls!
-
- Group: Malware Response Team
- Posts: 7,860
- Joined: 09-November 08
- Gender:Not Telling
- Location:Canada
Posted 24 November 2011 - 08:56 PM
Due to the lack of feedback, this topic is now closed.
In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.
In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.
The help you receive here is free. If you wish to show your appreciation, then you may
Microsoft MVP - 2010, 2011
Microsoft MVP - 2010, 2011
Share this topic:
Page 1 of 1
- You cannot start a new topic
-
This topic is locked