+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: cant open regedit or antivirus software (/showthread.php?tid=5136588)
cant open regedit or antivirus software - goldenarms_ - Jan 16, 2016
-snip--snip--snip--snip--snip--snip--snip--snip--snip--snip--snip--snip-
* - Knautschtabak - Jan 17, 2016
Hi kesey.
Please read through the points below before we start.
- Read my instructions thoroughly, and carry out each step in the specified order.
- Do not run any tools or take any steps other than those I provide for you. Independent efforts may make matters worse, and will affect my ability in providing the best set of instructions for you.
- Please backup important files before proceeding with my instructions. Malware removal can be unpredictable at times.
- If you come across any issues, please stop and inform me of the issue in detail. Do not hesitate to ask before proceeding.
- I will notify you when I believe your computer is free of malware. The absence of symptoms does not necessarily mean that your computer is clean.
- If I do not reply within 48 hours, write a PM. I might have just overlooked your thread. Keep in mind that we likely live in different time zones.
- I might abandon your thread if you do not reply within five days. I take only as many logs as I can handle.
------
Step 1: Farbar Recovery Scan Tool (FRST) Scan
- Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
- Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
- Right-Click FRST.exe or FRST64.exe and select Run as Administrator
- Click Yes to the disclaimer.
- Ensure the Addition.txt box is checked.
- Click the Scan button and let the program run.
- Upon completion, click OK, then OK on the Addition.txt pop up screen.
- Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste them to pastebin.com. Post the link here.
Step 2: TDSSKiller Scan
- Please download TDSSKiller and save the file to your Desktop.
- Right-Click TDSSKiller.exe and select Run as Administrator
- Click Change parameters. Place a checkmark next to Detect TDLFS file system and Verify file digital signatures.
- Click Start Scan. Do not use the computer during the scan.
- If objects are found, change the action to skip.
- Click Continue and close the window.
- A log will be created and saved to the root directory (usually C:\). Paste the file contents to pastebin.com and post the link in your next reply.
* - goldenarms_ - Jan 18, 2016
fixed it actually before i saw this reply. i ended up changing the name of the antivirus software executable from mbam.exe to teehee.exe. worked like a charm. mbam was able to pick up the virus and now i can open everything as normal
* - Knautschtabak - Jan 19, 2016
Good to hear that you solved it, kesey, and thanks for letting me know.
If you need help to check your system or get rid of leftovers, I am here.