18 replies to this topic

[Grayson]

Trojan infiltrated my desktop and I first ran Adaware from Lavasoft ... no luck.

Then Spybot Search and Destroy ... again, no luck.

Then Malewarebyte and got "kicked out" the first run. The second efoort allowed the quick scan. Rebooted, and only got the dreaded BLACK screen with start up options of F2 or F12.

Now cannot boot up at all ... just hands with a blinkin' cursor on a black screen.

Hate to covert the drive to being just data as many programs reside on the drive. I normally conquer the trojans but this one has gotten the best of me. Any suggestions?

I have the trojan name at home and will post later. It was basically the desktop taken over with an image advising I had spyware, browser windows generated with the "advertised" spyware program to purchase, task manager rights withdrawn, and the little red X in the taskbar advising I had problems.

Thanks inadvance.

Grayson

[GT500]

Sounds like a problem with our delete on reboot driver. Do you have a BartPE disk? Running RunAlyzer from a BartPE disk will allow you to fix this.

[Grayson]

GT500, on Feb 19 2009, 07:58 PM, said:

Sounds like a problem with our delete on reboot driver. Do you have a BartPE disk? Running RunAlyzer from a BartPE disk will allow you to fix this.

Unfortunately not. I have a laptop with writable CD capabilities. Will downloading from anoth cimputer work?

[GT500]

Grayson said:

Unfortunately not. I have a laptop with writable CD capabilities. Will downloading from anoth cimputer work?

Do you know how to make a CD out of an ISO image?

[Grayson]

Learning as I go .... I'm thinking I've got one written on my laptop c drive. Planning on burning it to a CD .. correct?

[Grayson]

BartPE installed but RunAlyer is a seperate program (addon). Not familar with it. Saw it is similar to regedit. Have to leave now but will install it next. Any specific instructions once I get it uploaded?

Progress is slowly being made & yr assistance IS appreciated.

[GT500]

You can skip the more difficult steps of making the plugin on your own, and just download my BartPE disk from (link removed). I already have RunAlyzer installed in it, and working.

[Grayson]

Cool tool.

I get the penguin screen ...
Temp: B:
SystemDrive: X:
Volumes: B:/31.92 MB FAT
C:/ (unnrecognized)
D:/ 289.09 GB NTFS
Free Space:
(same as above)

Have gotten to "RunAlyzer - Multi-Installation Autostart & Configuration Manager

Am not sure what to do ... and don't want to jump off a cliff!

[Grayson]

frmwrk32.exe was the program that got into my system.

[GT500]

When you start RunAlyzer, the first tab should contain the autorun info. Look for a couple of entries for Malwarebytes' Anti-Malware, and disable them.

[Grayson]

Blank! No Value, Data, or Comapny listed

[GT500]

Grayson said:

Blank! No Value, Data, or Comapny listed

Are you not able to click the little boxes with the plus signs in them to expand each set of startup entries?

[Grayson]

They are not there! That portion of the screen is blank. No hope? New drive and slave the old? That's the advice I've been getting locally.

[GT500]

Grayson said:

They are not there! That portion of the screen is blank. No hope? New drive and slave the old? That's the advice I've been getting locally.

It should have a list of drives, such as C: and X: that you can click to expand.

See the following screenshot:

[Grayson]

GT500, on Feb 20 2009, 08:23 PM, said:

It should have a list of drives, such as C: and X: that you can click to expand.

See the following screenshot:

using_runalyzer.png

Nope! I wish it did. I installed on another machine and see what "supposed" to be there, bit nothing. It's like my c drive is either being ignored or was wiped clean ... ? Am now taking the task of removing it and seeing if it'll show up as the secondary drive on another michine ... unless there's any magic advice out there???

[GT500]

Grayson said:

Nope! I wish it did. I installed on another machine and see what "supposed" to be there, bit nothing. It's like my c drive is either being ignored or was wiped clean ... ? Am now taking the task of removing it and seeing if it'll show up as the secondary drive on another michine ... unless there's any magic advice out there???

Try running a check disk.

[Grayson]

corrupt disc with screwed up partitions

hope to salvage some data

[GT500]

Grayson said:

corrupt disc with screwed up partitions

hope to salvage some data

Did the check disk not help?

[Grayson]

Unfortunately, it seemed everything I did made things worse. Assuming, and not reading, complete instructions and guidelines is probably my downfall. I went from one computer down to two, due to my lack of knowledge of the registry, partitions, etc.

It was time to upgrade anyway, so I turned the drive over to a local professional. There was enough important data on the drive that I didn't need to be foolin' around with it and chance losing it forever. Should have made that decision earlier.

I'll update later what the technicians advise.