Author Topic: Yet another URL redirect bug  (Read 10166 times)

0 Members and 1 Guest are viewing this topic.

AntiAlchemist5

  • Guest
Re: Yet another URL redirect bug
« Reply #15 on: July 14, 2011, 06:56:45 PM »
Keep trying to scan, keep crashing before it's finished. Gah!

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Yet another URL redirect bug
« Reply #16 on: July 14, 2011, 07:17:51 PM »
Could you download the latest version.  Also what are the current problems ?

Download aswMBR.exe ( 1.8mb ) to your desktop.
 
Double click the aswMBR.exe to run it
 
Click the "Scan" button to start scan
 
 
On completion of the scan click save log, save it to your desktop and post in your next reply


AntiAlchemist5

  • Guest
Re: Yet another URL redirect bug
« Reply #17 on: July 14, 2011, 08:47:49 PM »
Here's the log, I'm sorry it took so long. It kept crashing on me.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Yet another URL redirect bug
« Reply #18 on: July 14, 2011, 09:56:59 PM »
Hi you did not download a new copy - you are still running the old version.  The new version is  0.9.7.747

AntiAlchemist5

  • Guest
Re: Yet another URL redirect bug
« Reply #19 on: July 14, 2011, 10:34:37 PM »
My apologies, I thought you meant the new version of Avast. Scanning now. And the problems are that it's redirecting to other sites, as well as it continually crashes. It's the same problems as before unfortunately.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Yet another URL redirect bug
« Reply #20 on: July 14, 2011, 10:45:58 PM »
aswMBR has been updated to counter this sort of nasty - which is why you needed to download it.  It should give me sufficient data to commence a repair 

AntiAlchemist5

  • Guest
Re: Yet another URL redirect bug
« Reply #21 on: July 14, 2011, 11:20:52 PM »
Here's the latest one.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Yet another URL redirect bug
« Reply #22 on: July 15, 2011, 07:53:38 PM »
Re-Run aswMBR 
 
Click Scan
 
On completion of the scan
 
Click the FIXMBR Button

 
Reboot and then re-run aswMBR 
Save the log as before and post in your next reply

Chibi1015

  • Guest
Re: Yet another URL redirect bug
« Reply #23 on: July 16, 2011, 03:03:31 AM »
Working on my comp again... ran ASW.... the NEW version. No option to run FixMBR after scan.

aswMBR version 0.9.7.750 Copyright(c) 2011 AVAST Software
Run date: 2011-07-15 18:08:42
-----------------------------
18:08:42.629    OS Version: Windows x64 6.1.7600
18:08:42.629    Number of processors: 4 586 0x2505
18:08:42.629    ComputerName: GLADOS-PC  UserName: GLaDOS
18:08:44.139    Initialize success
18:08:44.279    AVAST engine defs: 11071501
18:09:16.390    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
18:09:16.400    Disk 0 Vendor: Hitachi_ PB4O Size: 476940MB BusType: 3
18:09:16.420    Disk 0 MBR read successfully
18:09:16.420    Disk 0 MBR scan
18:09:16.430    Disk 0 MBR:Alureon-I [Rtk]
18:09:16.430    Disk 0 TDL4@MBR code has been found
18:09:16.430    Disk 0 MBR hidden
18:09:16.440    Disk 0 MBR [TDL4]  **ROOTKIT**
18:09:16.440    Disk 0 trace - called modules:
18:09:16.450    ntoskrnl.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0xfffffa800651b254]<<
18:09:16.450    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006499060]
18:09:16.460    3 CLASSPNP.SYS[fffff88001bd043f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa800623e050]
18:09:16.470    \Driver\iaStor[0xfffffa80061c6060] -> IRP_MJ_INTERNAL_DEVICE_CONTROL -> 0xfffffa800651b254
18:09:17.300    AVAST engine scan C:\Windows
18:45:53.292    AVAST engine scan C:\Users\GLaDOS
18:48:13.236    AVAST engine scan C:\ProgramData
18:53:43.056    Scan finished successfully
21:01:59.999    Disk 0 MBR has been saved successfully to "C:\Users\GLaDOS\Desktop\MBR.dat"
21:02:00.009    The log file has been saved successfully to "C:\Users\GLaDOS\Desktop\aswMBR1.txt"

psw

  • Guest
Re: Yet another URL redirect bug
« Reply #24 on: July 16, 2011, 05:32:40 AM »
But was the button FIX (not FixMBR!) active after scan?
If so run aswMBR again, make scan, press FIX, then reboot.
After reboot run aswMBR once more, make scan and post the new log.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Yet another URL redirect bug
« Reply #25 on: July 16, 2011, 01:12:54 PM »
Yep tis now reporting TDL4 so the fix button should now be operative, prees that one

Chibi1015

  • Guest
Re: Yet another URL redirect bug
« Reply #26 on: July 16, 2011, 03:15:31 PM »
Ok so i hit the Fix button after rerunning the scan... and my computer reset like it said... and now it's in a constant loop of "system repair". I am posting from another computer as I now can't get the one with the problems to boot windows properly.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Yet another URL redirect bug
« Reply #27 on: July 16, 2011, 03:20:34 PM »
When you reboot your computer press and hold F8, does that bring you to the safe mode menu ?

 
  • Start the safe mode menu by rebooting and pressing and holding F8 
  • Select Repair your computer.
  • Select the operating system you want to repair, and then click Next.
  • Select command prompt
  • Type in the following command 

 .
Bootrec.exe /FixMbr
 
  • Once finished type Exit

Chibi1015

  • Guest
Re: Yet another URL redirect bug
« Reply #28 on: July 17, 2011, 11:47:35 PM »
It's not letting me get to the safe mode screen at all. It just keeps cycling through system repair

Chibi1015

  • Guest
Re: Yet another URL redirect bug
« Reply #29 on: July 17, 2011, 11:51:15 PM »
ok, got it to run in safe mode, and did the bootrec command. it's running as if this is the first use of the computer.