removal of rootkit.mbr.ssta

October 26, 2011 at 17:06:16
Specs: Windows 7
Vipre will not remove this virus. I contacted their support and was told to download and run Vipre Rescue, Malwarebytes, and Vipre.

Still have the virus


See More: removal of rootkit.mbr.ssta

Report •


#1
October 26, 2011 at 19:30:56
crazydoctorbob,

In order to help identify the malware issue with your system, please do the following:

Download DDS from one of these locations:
http://download.bleepingcomputer.co...

http://download.bleepingcomputer.co...

Save it to your Desktop

Make sure you temporarily disable your AntiVirus, Firewall, and any other AntiSpyware applications. They may interfere with the programs we are about to run.

If you wish to look at information on how to disable these programs, please refer to the information available through this link:
http://www.bleepingcomputer.com/for...

Windows Seven: Right-click DDS and select: Run as Administrator

When done, DDS opens two logs:
-DDS.txt (Opens on the Desktop)
-Attach.txt (Is minimized - will show on the TaskBar)

Save both reports to your Desktop, and post them in your reply.

However, since these reports can be large, please upload them to Megaupload:
http://www.megaupload.com/

It is very easy to use:
Click: Browse
Select a file to upload
Upload the file
To the right of 'Send', enter a file description:
Click 'Send'
Copy the link provided, and post it in your reply.


Also download aswMBR:
http://public.avast.com/~gmerek/asw...

Save it to the Desktop.

Windows Seven: Right-click the file and select: Run as Administrator

Click Scan

Upon completion of the scan, click ‘Save log’ and save it to the Desktop.
Note - Please do NOT attempt any fix anything!!

Also post the log produced by 'aswMBR' in your reply.
This is a shorter report, and you do not need to upload it.


You will notice that another file is created on the Desktop.
It is named MBR.dat

Please keep the file on the Desktop, and do not do anything with it.
This is important, just in case we need to have access to the Master Boot Record (MBR) information.

Thanks.

~~~~
Retired - Doin' Dis, Dat, and slapping malware.
Malware Eliminator/Member of UNITE and the
Alliance of Security Analysis Professionals


Report •

#2
October 27, 2011 at 18:53:42
I forgot to mention. I am running Windows XP Professional SP3. Will this still work ?

Report •

#3
October 27, 2011 at 19:54:46
Yes, it will! Was going by the Operating System posted under your name in your original post.

However, instead of doing the following:

Right-click....and select: Run as Administrator, just double-click the downloaded file to run it.

~~~~
Retired - Doin' Dis, Dat, and slapping malware.
Malware Eliminator/Member of UNITE and the
Alliance of Security Analysis Professionals


Report •

Related Solutions

#4
October 29, 2011 at 14:43:04
Can I run these in the safe mode ?
I am downloading the recommended files to another computer and plan to tun them on the infected computer via a thumb drive.

Report •

#5
October 29, 2011 at 18:24:05
You can run DDS in Safe Mode, but, if you can run it in Normal mode, it would be best to do so.

However, aswMBR was meant to run in Nomal mode.

~~~~
Retired - Doin' Dis, Dat, and slapping malware.
Malware Eliminator/Member of UNITE and the
Alliance of Security Analysis Professionals


Report •

Ask Question