Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

SMART HDD Infection


  • Please log in to reply
3 replies to this topic

#1 elbow

elbow

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:34 PM

Posted 08 April 2012 - 08:20 AM

Hello,
Hoping for guidance on how to clean up remaining issues with SMART HDD infection. Running Windows 7 Professional.

I ran both the Malwarebytes scan and TDSSkiller scan. TDSS killer found 6 issues but does not offer "Cure" option, only Skip or Quarantine.

Got my icons on my desktop back and the random switch of internet sites is fixed but I can't get my programs to reappear in the start-up menu and my Constant Guard Suite with Norton keeps on popping up with an error message.

Any help greatly appreciated!!

TDSSKiller report:
===================================================
07:45:46.0602 2412 Detected object count: 6
07:45:46.0602 2412 Actual detected object count: 6
07:56:29.0061 2412 FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user
07:56:29.0061 2412 FLEXnet Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
07:56:29.0061 2412 hpqcxs08 ( UnsignedFile.Multi.Generic ) - skipped by user
07:56:29.0061 2412 hpqcxs08 ( UnsignedFile.Multi.Generic ) - User select action: Skip
07:56:29.0061 2412 hpqddsvc ( UnsignedFile.Multi.Generic ) - skipped by user
07:56:29.0061 2412 hpqddsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
07:56:29.0076 2412 HPSLPSVC ( UnsignedFile.Multi.Generic ) - skipped by user
07:56:29.0076 2412 HPSLPSVC ( UnsignedFile.Multi.Generic ) - User select action: Skip
07:56:29.0076 2412 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
07:56:29.0076 2412 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
07:56:29.0076 2412 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:11:34 PM

Posted 08 April 2012 - 08:55 AM

Press windows+R Key and type

%temp%
and click ok

If you have folder called SMTMP ,copy it to a safe location

or

Right click on your startmenu-properties

Check mark

store and display recently opened programs
store and display recently items


Click on customize

Click on Use default settings at the bottom

Now go to

c:\ProgramData\Microsoft\Windows

right click on startmenu folder,click on restore previous versions

Now select a snapshot before you were infected by the rogue,click on restore

You should get back the startmenu programs

good luck

Edited by narenxp, 08 April 2012 - 08:55 AM.


#3 elbow

elbow
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:34 PM

Posted 09 April 2012 - 01:34 PM

Thank you for the assistance. I now have my Start menu back!

Still having trouble with malicious shutting down of any browser windows when I try to go online.

also, I cannot access my Norton Security which is part of a free download from Comcast called Constant Guard.

Any other way to scan my entire system for remains of this infection?

Thank you!

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:11:34 PM

Posted 11 April 2012 - 04:03 AM

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here

Download

ESET online scanner


Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply


Download

mini toolbox

Checkmark following boxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size

Click Go and post the result.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users