Infected with Smart HDD.

S

speedkills

New Member
Thread author
Apr 7, 2012
12
0
5
36
[attachment=1115][attachment=1114]


I have tried everything and I still cannot open anything outside of safe mode. Any help would be greatly appreciated.
 
Hi this should be able to restore your access back...

  • Download RogueKiller and save it on your desktop.
  • Quit all programs
  • Start RogueKiller.exe.
  • Wait until Prescan has finished ...
  • Click on Scan
RGKRScan.png

  • Wait for the end of the scan.
  • The report has been created on the desktop.
  • Click on the Delete button.
RGKRDelete.png

  • The report has been created on the desktop.

  • Next click on the ShortcutsFix
    RGKRDelete.png
  • The report has been created on the desktop.

Please post:

All RKreport.txt text files located on your desktop.
 
Thanks for your help!

I couldent run it in normal mode, so I ran it in safe mode.

It went normal so I restarted, however, before it finished shutting down, it just shut off. When I turned it back on it ran some sort of repair for about 15 minutes, and now I am right back where I started.
 
Hi,

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options by using Windows installation disc:
  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Select English as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.

On the System Recovery Options menu you will get the following options:

    • Startup Repair
      System Restore
      Windows Complete PC Restore
      Windows Memory Diagnostic Tool
      Command Prompt
  • Select Command Prompt
  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
    Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
 
Thank you for your help! Sorry it took so long, I had to find my windows 7 CD.
I think I have the scan you are asking for, however, when i try to upload it, this site tells me I am over my 1 Mb limit. The file is only 1354 KB. I deleted the files I had uploaded before, however, it will not allow me to upload the file. any ideas?
 
upload the file here www.mediafire.com

post the sharing link on next reply.

Also please open malwarebytes and move towards the log tab and attach the latest scan log.Your help will be needed in passing over these samples to the antivirus companies
 
malwarekiller said:
upload the file here www.mediafire.com

post the sharing link on next reply.

Also please open malwarebytes and move towards the log tab and attach the latest scan log.Your help will be needed in passing over these samples to the antivirus companies
Click to expand...


http://www.mediafire.com/?o045d36bj8v3ecw

I cant seem to find malwarebytes anymore. Its just gone. I checked in safe mode. All I have is Malwarbytes Anti-malware Chamelion. I dont know what that is

Thank you again.
 
OK...we need combofix to work now....Farbar seems to be not working

Download and Install Combofix 
 
Download ComboFix from one of the following locations: 
Link 1  
Link 2  
 
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop  
 
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here  
  • Double click on ComboFix.exe & follow the prompts.
  • Accept the disclaimer and allow to update if it asks

    NSIS_disclaimer_ENG.png


    NSIS_extraction.png

  • When finished, it shall produce a log for you. 
    [*]Please include the C:\ComboFix.txt in your next reply.

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3.  If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
 
Sorry for being so difficult. I connot find the log. Where would it have been created?

computer is running the same
 
speedkills said:
Sorry for being so difficult. I connot find the log. Where would it have been created?

computer is running the same
Click to expand...

Log at C:\combofix.txt

What is the error u get when opening a program??

can u give me a description of what the error says?
 
I'm sorry. im not finding any files by that name.

there is no error. it simply gives the loading signal for under a second, then nothing. as if i never tried to open it.
 
speedkills said:
I'm sorry. im not finding any files by that name.

there is no error. it simply gives the loading signal for under a second, then nothing. as if i never tried to open it.
Click to expand...

when u open programs what error u get??
 
Download Windows Repair (all in one) from here:
http://www.tweaking.com/content/page/windows_repair_all_in_one.html

Install the program then run

Go to step 2 and allow it to run Disc check
Capture3.gif

Once that is done then go to step 3 and allow it to run SFC
Capture.gif

On the start repairs tab select advanced mode and click start
Capture1.gif

Select all the items given and tick restart system when finished then click Start
 
speedkills said:
ran as instructed. not noticing a difference.
Click to expand...

OK...now i see only one way out of this and that is a repair install...dont worry u wont lose any data in this process see here:
http://www.sevenforums.com/tutorials/3413-repair-install.html

Keep your windows serial key in hand to activate your windows!! :rolleyes:
 

You may also like...