February 8th, 2010, 11:53 PM
#46
February 9th, 2010, 12:10 AM
#47
Yeah, we still have same issue:
[2007/03/21 19:58:56 | 000,304,920 | ---- | M] ()
Unable to obtain MD5 -- C:\WINDOWS\System32\drivers\iaStor.sys
Let's try OTM one more time. We'll use different file.Please double-click OTM to run it. (Note: If you are running on Vista , right-click on the file and choose Run As Administrator ). Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
Code:
:Processes
:Services
:Reg
:Files
C:\WINDOWS\System32\drivers\iaStor.sys|C:\SwSetup\HDD\iastor.sys /replace
:Commands
[purity]
[emptytemp]
[Reboot]
Return to OTM, right click in the "Paste Instructions for Items to be Moved " window (under the yellow bar) and choose Paste . Click the red Moveit! Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply. Close OTM and reboot your PC. C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.
February 9th, 2010, 12:17 AM
#48
All processes killed
February 9th, 2010, 12:24 AM
#49
February 9th, 2010, 10:00 AM
#50
February 9th, 2010, 12:40 PM
#51
Open Windows Explorer . Go Tools>Folder Options>View tab, put a checkmark next to Show hidden files, and folders .http://www.virustotal.com/ for security check:iaStor.sys
February 9th, 2010, 12:47 PM
#52
Not sure if you wanted this:http://www.virustotal.com/analisis/c...bf6-1265579255
Last edited by 704_Skate; February 9th, 2010 at 12:50 PM .
February 9th, 2010, 01:14 PM
#53
Please download ComboFix from Here Here **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop** Please, never rename Combofix unless instructed. Close any open browsers. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. Very Important! disable your anti-virus , script blocking and any anti-malware real-time protection before "unpredictable results" .Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask. NOTE 1. Recovery Console NOTE 2. always do so .Close any open browsers. WARNING: Combofix will disconnect your machine from the Internet as soon as it startsPlease do not attempt to re-connect your machine back to the Internet until Combofix has completely finished. If there is no internet connection after running Combofix, then restart your computer to restore back your connection. Double click on combofix.exe & follow the prompts. When finished, it will produce a report for you. Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review. **Note: Do not mouseclick combofix's window while it's running. That may cause it to stall** Make sure, you re-enable your security programs, when you're done with Combofix. DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
February 9th, 2010, 01:53 PM
#54
ComboFix 10-02-07.06 - User 02/09/2010 12:26:02.3.2 - x86
February 9th, 2010, 01:54 PM
#55
------- Supplementary Scan -------http://www.gmer.net http://www.gmer.net
February 9th, 2010, 01:55 PM
#56
Logfile of Trend Micro HijackThis v2.0.2http://www.myctc.net/ http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://ie.redirect.hp.com/svs/rdr?TY...ARIO&pf=laptop
February 9th, 2010, 02:02 PM
#57
1. Please open Notepad Click Start , then Run Type notepad .exe in the Run Box. copy/paste the entire content of the codebox below into the Notepad window:
Code:
KillAll::
File::
Folder::
Driver::
Registry::
RegLockDel::
MBR::
Save the above as CFScript.txt drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.Combofix.txt A new HijackThis log .
February 9th, 2010, 02:33 PM
#58
I have no idea what just happened:X
February 9th, 2010, 02:37 PM
#59
February 9th, 2010, 03:21 PM
#60
ComboFix 10-02-08.09 - User 02/09/2010 13:54:59.4.2 - x86
Thread Information
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Rules
Reply With Quote
