trojan horse hider.mpr [Closed]

hi, im daniel, using windows 7, recently caught a trojan horse hider.mpr cant remove it as says object is unaccessable, also cant find the file that it says it is in, on top of that it creating more viruses on my laptop and wont let me into google chrome and wont let me access malware, spyware or anti virus sites, is there anyone that can help me please, thank you.

Hi and Welcome!! My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:

• The fixes are specific to your problem and should only be used for the issues on this machine.
  
• It's often worth reading through these instructions and printing them for ease of reference.
  
• If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  
• Please reply to this thread. Do not start a new topic.
  
• If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it.

IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.

Having said that….Let's get going!!
———-

If necessary, please download the tools below to flash drive or CD and transfer them to the infected PC.
———-

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.

• Disable any script blocking protection
• Right-click and Run as Administrator dds to run the tool.
• When done, two DDS.txt's will open.
• Save both reports to your desktop.

—————————————————
Please include the contents of the following in your next reply:

DDS.txt

Attach.txt
———-

Please download aswMBR to your desktop.

• Right click and Run as Administrator the aswMBR icon to run it.
• Click the Scan button to start scan.
• When it finishes, press the save log button, save the logfile to your desktop and post its contents in your next reply.

[external image: Posted Image]
Click the image to enlarge it
———-

hi jeff, both of the links wont work with my internet explorer, after i press them it opes new page and says it cant connect to the internet. what should i do now?

tried to save target as instead and it says unable to download, a connection with the server could not be established

Have you tried to download them from a different computer and then transfer them?

i dont have another computer but i can try and access this site on my phone othwerewise ill have to wait till tomoz, when i can hold of another laptop i shall try now.

Ok that sounds fine. If you are not able to do anything until tomorrow that is not a problem.

ok thankyou for being patient, trying to get a friend to send it through email but its an exe file so wont send plus he cant change the extension to then be able to send so i have no choice but to wait till tomoz, so tomoz i get the files and give the logs that you need againg thanks for being patience.

Ok thanks for letting me know.

hi jeff i have the dds.txt and attach.txt going to put the attach.txt in a zip file or do you want both of .txt in a zip, also aswMBR has asked if i would like to download latest avast virus definitions what should i do? thanks Daniel

Hi, Yes you can zip those files if need be or you can just attach them to your reply individually. As for aswMBR, please allow it to download latest avast virus definitions.

it says avast engine download error : 0 when i say yes to downloading latest virus definitions

should i just do the scan anyway

Yes.

ok done ill shall copy and paste the aswMBR into this reply and ill attach the zip with both .txt in them aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-07-12 20:11:49 —————————– 20:11:49.305 OS Version: Windows x64 6.1.7601 Service Pack 1 20:11:49.305 Number of processors: 2 586 0x170A 20:11:49.305 ComputerName: BUDDY-TOSH UserName: buddy 20:11:49.976 Initialize success 20:11:52.337 AVAST engine download error: 0 20:13:13.614 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 20:13:13.614 Disk 0 Vendor: Hitachi_ PB4O Size: 476940MB BusType: 3 20:13:13.645 Disk 0 MBR read successfully 20:13:13.645 Disk 0 MBR scan 20:13:13.645 Disk 0 Windows 7 default MBR code 20:13:13.660 Disk 0 Partition 1 80 (A) 27 Hidden NTFS WinRE NTFS 400 MB offset 2048 20:13:13.676 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 238470 MB offset 821248 20:13:13.707 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 238069 MB offset 489207808 20:13:13.723 Disk 0 scanning C:\Windows\system32\drivers 20:13:21.414 Service scanning 20:13:45.562 Modules scanning 20:13:45.562 Disk 0 trace - called modules: 20:13:45.594 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll 20:13:46.108 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800579b740] 20:13:46.108 3 CLASSPNP.SYS[fffff88001bd143f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004745050] 20:13:46.124 Scan finished successfully 20:19:27.531 Disk 0 MBR has been saved successfully to "C:\Users\buddy\Desktop\MBR.dat" 20:19:27.546 The log file has been saved successfully to "C:\Users\buddy\Desktop\aswMBR.txt"