[Resolved] directrdr.com problem

Hi i have directrdr.com hidden somewhere on my computer i found it in your forum but it didn't show me LDTate fix program or suggestion to remove this problem I have run more programs than you can imagine to find this problem including the ones mentioned in the forum but sadly I can't seem to pick where the problem is even with running these programs. And non of the software i have recently purchased seem to be able to pick up the problem either they find the atdmt cookie but that is about it. please any help would be very much appreciated. kind regards Boogie7man

[external image: Posted Image]


DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.

Vista and Windows 7 users:
1. These tools MUST be run from the executable. (.exe) every time you run them
2. With Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

I suggest you do this:

XP Users

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Uncheck "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Uncheck "Hide protected operating system files."
Click Apply, and then click OK.


Please do not delete anything unless instructed to.


We've been seeing some Java infections lately.
Go here and follow the instructions to clear your Java Cache


Next:

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
[external image: Posted Image]
Click the Empty Selected button.

(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

Next:

Please download Malwarebytes' Anti-Malware to your desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
• At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select Perform quick scan, then click Scan.
  [external image: Posted Image]
• When the scan is complete, click OK, then Show Results to view the results.
• [external image: Posted Image]
• Then click Remove Selected .
• When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
• Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.

Also please describe how your computer behaves at the moment.


Please don't attach the scans / logs, use "copy/paste". .

ok my computer has or had Rootkit.Win32.TDSS I found a program here at this site http://www.esagelab.com that removes it but i keep getting atdmt cookie appearing I have run the programs you have suggested and will let you know after reboot in the morning as the massive spider running across my keyboard just before has made me decide that it is definately bed time. Thankyou so much for your fast reply.
Leanne.

Ok I am now on my daughters computer as i did the cache temp stuff and then the other program then updated mbam as I always have this program anyway. after it updated it wanted to restart even before i got to run it and now my computer just won't boot up even in safe mode it gets to the last file just before the safe mode screen appears and reboots itself. Now some part of the couple of things i did have apparently gone very wrong. as my computer was starting up fine after running the program I mentioned earlier in this thread. Is there some way to get to my computer restore so I can do a restore I have been trying everything I can think of but it denies me access to windows going through the recovery panel. Any suggestions now appart from a reformat

Did you try booting with the windows cd and try "R" for repair? That TDSS Rootkit can kill a pc.

i have tried the repair from cd and I am currently in that section at the moment trying to get it to run restore, I have it right to the command line. c./windows/system32/restore> but it just won't accept the line rstrui.exe to make the program run. I had rebooted the computer a number of times without problem after running the program i mentioned to you that i found. as windows updates had occured and needed reboot. I am a little stumped why it won't accept the last command of rstrui.exe

Instead of trying system restore run chkdsk /r <–Note the space.

Ok I feel like a bit of an idiot but you know there is two repairs on the windows disk hey and if you click r on the first one it sends you to recovery console but if you hit enter and head for the second repair r it actually removes all the files needed to start windows and then replaces them. Things look very promising at the moment I blame the spider for frightening the hell out of me in the dark earlier. Thankyou so much for all your time and patients with me and i will let you know if it fails but it is like 3.22am here so this will be my last post till much later in the morning.

Well my computer is alive and at the moment doesn't seem to be redirecting itself anywhere, but i keep getting that stupid atdmt cookie appear i just have to figure out what program is making it grab my computer all the time. I am yet to run mbam cross your fingers.

Run MBAM and lets see what it finds

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.