Virus Help (BOO/TDss.O)

[TBDesigns]

I got this virus on my boot sector. I'm using Avira but it doesn't remove it it ask me to download some removal tool I downloaded the exe file and it ask me to put it on a cd and boot from the cd drive I did and it doesn't do anything.

Anyone know anyway to get rid of this? I keep seeing stuff about it being on regedit but I don't see it in there and don't know how to do anything in regedit!

PLEASE HELP!

[GlockGuy]

Here's a good start, but the trojan will probably rename itself and reinfect the system. Worth a shot though... Good luck! Be sure to back up your registry before making any changes.

http://blog.teesupport.com/completely-remove-bootdss-o-manual-removal-instruction-for-bootdss-o-boot-sector-virus/

[jloffermann]

trendmicro has a good root cleaner. It sounds like thats what your have.

http://downloadcenter.trendmicro.com/index.php?regs=NABU&clk=latest&clkval=355&lang_loc=1

the above link is for the rootkit buster from trendmicro. it should help. I have used this for a few friends computers where their kids got viruses etc...

[TBDesigns]

trendmicro has a good root cleaner. It sounds like thats what your have.

http://downloadcenter.trendmicro.com/index.php?regs=NABU&clk=latest&clkval=355&lang_loc=1

the above link is for the rootkit buster from trendmicro. it should help. I have used this for a few friends computers where their kids got viruses etc...

Just tried it but doesn't work for 64bit

[TBDesigns]

Nothing I have found online works!!!!

[GlockGuy]

You have one more option. Download and buy Sunbelt Software VIPRE security software. Install it and run it. If it won't remove it you can contact them and a tech will remote in and clean it for you at no charge.

[TBDesigns]

I really don't want to buy any software until I know it works. Avira said it could remove it and it DON'T $79 waste.

[ExtremeX]

Try this... its also free.

http://support.kaspersky.com/faq/?qid=208283363

http://support.kaspersky.com/faq/?qid=208280684

If you are looking for anti-virus software worth paying for... Eset NOD32 and Kaspersky should be considered.

Backup software like Acronis is also worth a look, since its a painless way to re-image your system to a past date incase all efforts fail and a reformat is required.

[the86d]

Also, since you are running Windows7/Vista:

https://www.google.com/search?hl=en&q=Windows+7+%2Ffixmbr+%2Ffixboot&oq=Windows+7+%2Ffixmbr+%2Ffixboot&aq=f&aqi=g-bq1&aql=&gs_sm=12

Many times files become corrupt (virus, Windows Updates, power hiccups), and you can do a "chkdsk /f" from a command prompt, if you can get there.

How old is the computer?

Do you leave it on all the time?

You also have the option of yanking the drive out, and scanning it on a clean computer with current AV defs, and you can ALWAYS do a checkdisk of a second drive from a working computer...

[Nose Nuggets]

screw these AV programs their all crap. just go straight to combofix

trust me

[TBDesigns]

screw these AV programs their all crap. just go straight to combofix

trust me

I downloaded it and extracted it but it did nothing after that

[Nose Nuggets]

I downloaded it and extracted it but it did nothing after that

you extracted combofix.exe to the desktop and ran it, but it did nothing?

reboot into safe mode and run it again.

[TBDesigns]

you extracted combofix.exe to the desktop and ran it, but it did nothing?

reboot into safe mode and run it again.

I downloaded and extracted the files but it didn't say where it extracted them to.

[borongas]

I use combofix on enterprise systems with great results. Getting it to run can be a ***** sometimes. Get to the .exe and right click, run as admin.

[Nose Nuggets]

I downloaded and extracted the files but it didn't say where it extracted them to.

open up the zip but dont use the wizard, just drag and drop the combofix.exe file out of the zip and onto the desktop. then run it. if you have issues even doing that, reboot and go through the above process in safe mode.

combo fix is better run in normal mode though. if you cant run it in normal, run it in safe mode then reboot to normal mode, reboot again, then run combo fix in normal mode and reboot one last time.