Author Topic: malicious url blocked  (Read 26878 times)

0 Members and 1 Guest are viewing this topic.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89056
  • No support PMs thanks
Re: malicious url blocked
« Reply #45 on: July 09, 2011, 02:12:04 AM »
It is now 1:10am in the UK so essexboy will be in bed. So it will be tomorrow before he is back on the forums.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: malicious url blocked
« Reply #46 on: July 09, 2011, 12:49:48 PM »
As the partitions are now in the right place could you retry startup repair ans it appears that the winload is not being run

nabby68

  • Guest
Re: malicious url blocked
« Reply #47 on: July 09, 2011, 01:51:09 PM »
Ok got to and ran start up repair, first it started to look for any windows installations which it didn't find then it gave me the option to use recovery tools to fix problem or
If your op system isn't listed then click load drivers and them install drivers for your hard disks
When I click "load drivers" it asks to insert installation media for the device and click ok to select driver
When I click ok it gives me an explored box with
Libraries
System
Computer
Control panel and recycle bin
Do you think I could have a hard drive issue if system recovery can't see the windows installation?

nabby68

  • Guest
Re: malicious url blocked
« Reply #48 on: July 09, 2011, 01:58:25 PM »
Ran start up repair again and it said windows cannot repair this computer automatically so I click "view diagnostic and repair details" which basically say
Root cause found:
--------------------
No OS files found on disk

Repair action: Partition table error
Result: Failed. Error code = 0x490
Time taken: =312ms

Offline gearedsteam

  • Newbie
  • *
  • Posts: 13
Please ignore this
« Reply #49 on: July 09, 2011, 02:33:58 PM »
Please ignore my earlier post about this being a firefox add-on.   It seems to be re-occurring.
« Last Edit: July 09, 2011, 05:20:21 PM by gearedsteam »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89056
  • No support PMs thanks
Re: malicious url blocked
« Reply #50 on: July 09, 2011, 03:30:10 PM »
Thanks for the feedback, it will certainly be a quick and easy thing to check if the are using firefox and this add-on. Disable/uninstall and see if that resolves it, but may still need OTS analysis to ensure all remnants are gone.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: malicious url blocked
« Reply #51 on: July 09, 2011, 03:30:50 PM »
OK lets see if this will restore it

Go to the recovery console and select command prompt

Type in the following

C:\WINDOWS\ERDNT\Hiv-backup\erdnt.exe

This will activate the registry backup before Combofix ran

nabby68

  • Guest
Re: malicious url blocked
« Reply #52 on: July 09, 2011, 04:51:28 PM »
OK done as you requested and got the following message in the command window
The subsystem needed to support the image type is not present.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: malicious url blocked
« Reply #53 on: July 09, 2011, 05:11:50 PM »
Hmm this is actually begining to look like a hard disc failure than anything else

Could you run check disc at the command prompt to see if that can locate the error

At the command prompt type chkdsk /f

nabby68

  • Guest
Re: malicious url blocked
« Reply #54 on: July 09, 2011, 05:34:32 PM »
Ok , this is what I see at the command prompt
X:\sources>
so then I type
chkdsk /f
And I get
The type of file is NTFS. Cannot lock the current drive.
Windows cannot run disk checking on this volume because it is write protected

So, then I change the command prompt to C: and type chkdsk /f
And I get
The type of file system is NTFS.
Cannot lock current drive.

Chkdsk cannot run because the volume is in use by another process. Chkdsk may run if this volume is dismounted first.
All opened handles to this volume would then be invalid
Would you like to force a dismount on this volume? (y/n)


What should I do?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: malicious url blocked
« Reply #55 on: July 09, 2011, 05:38:06 PM »
Yes force a dismount

nabby68

  • Guest
Re: malicious url blocked
« Reply #56 on: July 09, 2011, 06:09:19 PM »
Ok ran chkdsk which said that windows fixed some errors. Then booted up and still get same error on windows boot manager as in previous posts

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: malicious url blocked
« Reply #57 on: July 09, 2011, 06:59:37 PM »
OK lets look at a partition recovery as that is where all the errors point to

Download  EASEUS Partition Recovery http://www.easeus.com/partition-recovery/
Instructions are here http://www.easeus.com/partition-recovery/winpe-for-partition-recovery.htm to burn to a disc
Usage instructions for the cd are here http://www.easeus.com/resource/partition-recovery.htm

nabby68

  • Guest
Re: malicious url blocked
« Reply #58 on: July 09, 2011, 08:15:15 PM »
ive downloaded easus partition recovery and installed it to desktop but how do i burn it to a disc? can you clarify please

nabby68

  • Guest
Re: malicious url blocked
« Reply #59 on: July 09, 2011, 08:31:28 PM »
get this error when hitting the plug in key using easus partition, maybe my windows disc hasnt got everything on it?????
« Last Edit: July 09, 2011, 09:41:43 PM by nabby68 »