close

Privacy guaranteed - Your email is not shared with anyone.

Virus - rootkit removal?

Discussion in 'Tech Talk' started by vote Republican, Jul 17, 2011.


  1. vote Republican

    vote Republican
    Expand Collapse
    White and nerdy
    Moderator

    Joined:
    Aug 23, 2002
    10,415
    992
    Location:
    OAF Mecca, MD
    My father in law has an old XP computer. It got virused, and running from a AV boot CD it shows volsnap.sys has a rootkit. So I need to replace this file, not just delete it (important system file). Thoughts? I am gearing towards format/reinstall, but I'm just wondering if there's anything anyone has done here.

    When I run AV from the OS, it doesn't show this infection. Malwarebytes, Sophos show clean.
     

    Wanna kill these ads? We can help!
  2. eracer

    eracer
    Expand Collapse
    Where's my EBT?

    Joined:
    Apr 5, 2011
    6,711
    1
    Location:
    Tampa, FL
    #2 eracer, Jul 17, 2011
    Last edited: Jul 17, 2011
  3. GIockGuy24

    GIockGuy24
    Expand Collapse
    Bring M&M's

    Joined:
    Jul 14, 2005
    4,037
    5
    Location:
    With Amber Lamps
    Kaspersky TDSSKiller is suppose to repair that one.

    http://support.kaspersky.com/downloads/utils/tdsskiller.zip

    More info

    http://support.kaspersky.com/faq/?qid=208283363
     
    #3 GIockGuy24, Jul 17, 2011
    Last edited: Jul 17, 2011
  4. GIockGuy24

    GIockGuy24
    Expand Collapse
    Bring M&M's

    Joined:
    Jul 14, 2005
    4,037
    5
    Location:
    With Amber Lamps
    Ah the zip file version may be out of date.

     
    #4 GIockGuy24, Jul 17, 2011
    Last edited: Jul 17, 2011
  5. Pierre!

    Pierre!
    Expand Collapse
    NRA Life Member

    Joined:
    Jun 20, 2003
    3,921
    109
    Location:
    Lovin Sparks Nv!
    RootKits *suck*...

    I have always just 'Nuked Them From Space' so that I am sure... Particularly on Business systems in highly regulated industries.

    And, after the re-install, it's so much faster!

    It will be interesting to see if this gets effectively cleaned!

    Nice links GlockGuy24... looking to hear this fixes up nice and easy!
     
  6. vote Republican

    vote Republican
    Expand Collapse
    White and nerdy
    Moderator

    Joined:
    Aug 23, 2002
    10,415
    992
    Location:
    OAF Mecca, MD
  7. vote Republican

    vote Republican
    Expand Collapse
    White and nerdy
    Moderator

    Joined:
    Aug 23, 2002
    10,415
    992
    Location:
    OAF Mecca, MD
    100% agree for work computers, make an image & keep docs on a network drive. This is an old PC, not sure where all the CDs are even (I could probably find one if I had to).
     
  8. Pierre!

    Pierre!
    Expand Collapse
    NRA Life Member

    Joined:
    Jun 20, 2003
    3,921
    109
    Location:
    Lovin Sparks Nv!
    Thanks for letting us know how it went!

    I may have a new tool for the future, you too no doubt! :supergrin:

    Thanks, and I dig your 'Handle' - vote Republican - and vote em all out till further notice (LOL)

    Patrick
     
  9. vote Republican

    vote Republican
    Expand Collapse
    White and nerdy
    Moderator

    Joined:
    Aug 23, 2002
    10,415
    992
    Location:
    OAF Mecca, MD
    You've been around almost as long as I have, and you've never noticed? LOL
     
  10. srhoades

    srhoades
    Expand Collapse

    Joined:
    Jul 14, 2000
    2,784
    9
    combofix is now pretty good at replacing infected system files.
     
  11. gemeinschaft

    gemeinschaft
    Expand Collapse
    AKA Fluffy316

    Joined:
    Feb 7, 2004
    2,181
    0
    Location:
    Houston, TX
    VR, I have a bunch of Windows OEM discs. As long as you still have a valid license key, you might be able to use another disk.

    What OS and who is the Manufacturer?
     
Loading...
Similar Threads Forum Date
Binkiland Virus removal? Tech Talk Feb 16, 2015
Virus/Malware Removal Guide for Windows Tech Talk Aug 21, 2012
virus? Tech Talk Jun 24, 2010
Virus Okie Memorial Area May 7, 2009
Virus removal help Tech Talk Apr 26, 2009
Duty Gear at CopsPlus