This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

rootkit.patched.tdss.gen

2 min read

This thread's last reply is from April 20, 2010, 3:15 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

brandonatutsa
April 19, 2010, 11:37 PM UTC
Ok, so on my other WinXP computer, the computer flashes the desktop on and off repeatedly because explorer.exe is being turned on and off.

This occurs as soon as the BitDefender window pops up to say if I want to buy the program. Yesterday when I ran the program, it found traces of rootkit.patched.tdss.gen and quarantined them. Now the only way I can even do anything on the computer is to run it in safemode. But I can't install hijackthis to the computer in safemode or I would post the log. Also no internet browsers will open at all.

What can I run from a jumpdrive that I don't have to install in safemode so that I can post a log for you guys?
NonSuch
April 20, 2010, 3:15 AM UTC
We understand that you are having difficulty running certain programs, including HijackThis. However, in order for us to help you it is necessary that you provide us with a HijackThis log, and it is possible you may be able to trick the malware into letting you do this. First, download HijackThis to a clean computer, then rename it from HijackThis.exe to any other name you want, using an .exe extension, for example... YourLastName.exe. Once you have done that, burn it to a CD (preferable to using a flash drive that may easily become infected) then transfer the renamed file to the infected computer and run a scan, then start a new topic and include your HijackThis log.

If that does not work, try the following:

Download/run Rkill:

Please download Rkill from one of the following links and save to your Desktop:

One, Two,Three or Four

  • Double click on Rkill.
  • A command window will open then disappear upon completion, this is normal.
  • Please leave Rkill on the Desktop until otherwise advised.


Note: If your security software warns about Rkill, please ignore and allow the download to continue.

Next, please follow the guideline at the link below to start a new topic and post your HijackThis log. If you are unable to create and post a HijackThis log, then your only option may be to reformat your computer and reinstall the operating system.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<