MBR:\\.\PHYSICALDRIVE0\Partition2 --help me get rid of this thing!!

Viruses and worms
21

Yes allow the installation of the recovery console… You will need to be online for this

22

Next morning and now that is not an option on my computer and desktop no longer has combofix. Try to reboot computer and this message pops Up"windows cannot end this program. It may need more time to complete an operation. To return to windows and check status of Tehran program click cancel. If you ooze to end program Immediately you will lose any Saved data. To end program now click end now.Click"

So i clicked cancel…and no combo fix to be found…can click omit my computer icon and see an icon for combofix in c: but will not open…please advise.

23

Reboot the computer and if it reappears then click end

24

Rebooted and nothing…no combifix on desktop…should i re-start this step and try combifix again ?

25

Yes please as I am hoping we can knock it back far enough to enable us to kill the main bad boy

26

Attempted to run combifix and got an error message something about ipxe??? Computer automatically shut down before I could record the message. What should I do now? I do not think it likes this combifix thing…

27

Did the recovery console get installed ? As we can use that instead of the other cd/usb

If not then do the following to install the recovery console… Combofix may stall after the recovery console is installed but that is not a problem

Go to Microsoft’s website => http://support.microsoft.com/kb/310994

Scroll down to Step 1, and select the download that’s appropriate for your Operating System. Download the file & save it as it’s originally named.

Note: If you have SP3, use the SP2 package.

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

http://img.photobucket.com/albums/v666/sUBs/RC1-4.gif

[*]Drag the setup package onto ComboFix.exe and drop it.

[*]Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console.

http://img.photobucket.com/albums/v706/ried7/whatnext.png

[*]At the next prompt, click ‘Yes’ to run the full ComboFix scan.

[*]When the tool is finished, it will produce a report for you.

Please post the C:\ComboFix.txt in your next reply.

28

Dragged the setup package into combo fix–no “What next?” prompty appeared. The blue screen came up appeared to be runningthen stalled and shut down the computer. Will I ever get my computer back?

29

We will do our best

When you download this programme rename it to iexplorer before saving

Download the latest version of TDSSKiller from here and save it to your Desktop.

[*]Doubleclick on TDSSKiller.exe to run the application

http://dl.dropbox.com/u/73555776/TDSSFront.JPG

[*]Then click on Change parameters.

http://dl.dropbox.com/u/73555776/TDSSConfig.JPG

[*]Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.

[*]Click the Start Scan button.

[*]If a suspicious object is detected, the default action will be Skip, click on Continue.

http://dl.dropbox.com/u/73555776/TDSSFound.JPG

[*]If malicious objects are found, they will show in the Scan results and offer three (3) options.
[*]Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.

[*]Get the report by selecting Reports

http://dl.dropbox.com/u/73555776/TDSSEnd.JPG

[*]Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.

Please copy and paste its contents on your next reply.