Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Can't Download Unhide.exe


  • Please log in to reply
22 replies to this topic

#1 Leonesa

Leonesa

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:07 AM

Posted 27 September 2011 - 12:57 PM

Hi! Glad I found your site - wish it was before I started using another site's suggestions.

Got the Data Recovery infection on Saturday night. Found a site before I found yours and did the following:
- Ran cmd, and did attrib -h /s /d to unhide some folders
- Already had MBAM on my system from previous infection; updated and ran that. Did a full scan and removed all selected items.
- Desktop and Start Menu still weren't/aren't right.
- Google search engine was/is still being redirected, and many sites are not displaying properly (i.e.: many not display anything at all)

When trying to get a copy of the latest MBAM for my flash drive, was redirected to your site for free version download, which is how I found you.

Anyway, read through your Uninstall Guide for Data Recovery, and downloaded all of the tools mentioned except for Unhide.exe. Have been trying to download it since yesterday afternoon and it just keeps hanging at 18% and just sits there. Is there an IE setting on my system that might be preventing this? Any suggestions on how to get it downloaded?

Once I can get Unhide.exe downloaded, given what I've done already, is it still okay/advisable to perform all steps in your Uninstall Guide:
- Run Rkill
- Run TDSSKiller
- Run MBAM
- Run Unhide.exe
- Optionally run Secunia Personal Software Inspector

Thanks for your help. Great site!

BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:05:07 PM

Posted 27 September 2011 - 01:19 PM

What guide are you following?

#3 Leonesa

Leonesa
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:07 AM

Posted 27 September 2011 - 01:29 PM

Remove Data Recovery (Uninstall Guide)

#4 Leonesa

Leonesa
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:07 AM

Posted 27 September 2011 - 01:38 PM

...from the Spyware Removal tab.

#5 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:05:07 PM

Posted 27 September 2011 - 01:57 PM

Then yes follow the guide and post back if you have issues.

#6 Leonesa

Leonesa
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:07 AM

Posted 27 September 2011 - 02:01 PM

Thanks. What about the Unhide.exe issue. Is it possible that I can't download it - that is, it just hangs - (or the Secunia Personal Software Inspector) because of a rootkit or some remnant of the Data Recovery malware that was left behind? Worst case, I guess I could manually copy links/shortcuts back to where they belong, but your tool appears to make it much easier.

#7 Leonesa

Leonesa
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:07 AM

Posted 27 September 2011 - 03:18 PM

Forget the last post. Got a friend to download it and send via e-mail with the extension changed. Will run all the other stuff and let you know how I fare. Thanks.

#8 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:05:07 PM

Posted 27 September 2011 - 03:30 PM

Follow the guide, and post the logs to make sure things are getting done right.

#9 Leonesa

Leonesa
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:07 AM

Posted 27 September 2011 - 04:19 PM

Started running RKill and after an hour it is still just a black box. I know the guide says to be patient, but patience is relative, especially in semi-panic mode. Have a guesstimate - or range of time - for how long this particular task should run? I don't mind waiting; just want to be sure I've launched it correctly and that it's doing something. Thanks.

#10 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:05:07 PM

Posted 27 September 2011 - 04:21 PM

Try running it in Safe Mode if you can.

#11 Leonesa

Leonesa
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:07 AM

Posted 27 September 2011 - 04:29 PM

I'll give it a shot. Thanks.

#12 Leonesa

Leonesa
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:07 AM

Posted 27 September 2011 - 04:47 PM

Ran it in Safe Mode and it completed in 20 seconds?

The log:
**************
This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 09/27/2011 at 16:38:19.
Operating System: Microsoft Windows XP


Processes terminated by Rkill or while it was running:



Rkill completed on 09/27/2011 at 16:39:39.

***************
OK to proceed with remaining steps in Safe Mode? Or go back to regular mode and continue?

#13 Leonesa

Leonesa
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:07 AM

Posted 27 September 2011 - 05:21 PM

Update:
- Went back to regular mode
- Reran RKill which ran this time in about same time as safe mode; no processes found/stopped
- Renamed TDSSKiller on Desktop to NewName123.com and double-clicked to launch; nothing appeared to be happening. Tried to launch it again; again,
appears that nothing is happ

#14 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:05:07 PM

Posted 27 September 2011 - 05:24 PM

try all the tools above in safe mode. Post the scans.

#15 Leonesa

Leonesa
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:07 AM

Posted 27 September 2011 - 05:26 PM

Sorry - hit the wrong button. To continue from last post...

- appears that nothing is happening. Should you actually see the process/task doing something? Either way, how long does this step typically take? (NB: Might be
a good idea for the uninstall guides to give guesstimates of how long each step should take to help avoid too many posts and questions.)

- OK to just run the TDSSKiller.exe file without renaming it?

Hate to be a pain, but this is just not my forte.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users