Sony Vaio "Hardrive Clusters are Partially Damaged"

ralphie

I think I have picked up a virus while browsing the internet.I am getting a load of messages the main one being "Hardrive Clusters are partially Damaged" and asking me to do a "Systems check" with what looks like a windows programme.I am not allowed to do anything else on the Laptop and I cant access any programmes or the hard drive.I have Googled this problem and it seems its a known virus.By the way I am posting this on another Laptop that I have.
I would appreciate any help in trying to get rid of this virus.Thanks.

ASJ112

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Click the Quick Scan button. Do not change any settings. The scan wont take long.
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files here

mp22

http://www.bleepingcomputer.com/virus-removal/remove-system-check

ralphie

ASJ112 wrote: »

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Click the Quick Scan button. Do not change any settings. The scan wont take long.
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files here

I have now managed to do the OTL scan.I am now wondering is it safe to post the results here on a public forum.Thanks for your help.

ASJ112

yeah its safe, just remove your name and any other information you are worried about.

you can also fully remove the logs later once I create a fix for you from them.

ASJ112

open OTL, copy and paste this into the custom scan/fixes box


:OTL
[2012/03/26 02:34:50 | 000,000,000 | -H-D | C] -- C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check
[2012/03/26 02:48:54 | 000,000,440 | -H-- | M] () -- C:\ProgramData\RrpkrisXGdWVTu
[2012/03/26 02:46:16 | 000,000,264 | -H-- | M] () -- C:\ProgramData\~RrpkrisXGdWVTu
[2012/03/26 02:35:00 | 000,000,176 | -H-- | M] () -- C:\ProgramData\~RrpkrisXGdWVTur
[2012/03/26 02:34:50 | 000,000,677 | -H-- | M] () -- C:\Users\John\Application Data\Microsoft\Internet Explorer\Quick Launch\System Check.lnk
[2012/03/26 02:34:50 | 000,000,653 | -H-- | M] () -- C:\Users\John\Desktop\System Check.lnk
[2012/03/26 02:34:31 | 000,361,984 | -H-- | M] ( ) -- C:\ProgramData\RrpkrisXGdWVTu.exe
[2012/03/26 02:35:00 | 000,000,176 | -H-- | C] () -- C:\ProgramData\~RrpkrisXGdWVTur
[2012/03/26 02:34:51 | 000,000,264 | -H-- | C] () -- C:\ProgramData\~RrpkrisXGdWVTu
[2012/03/26 02:34:50 | 000,000,677 | -H-- | C] () -- C:\Users\John\Application Data\Microsoft\Internet Explorer\Quick Launch\System Check.lnk
[2012/03/26 02:34:50 | 000,000,653 | -H-- | C] () -- C:\Users\John\Desktop\System Check.lnk
[2012/03/26 02:34:43 | 000,000,440 | -H-- | C] () -- C:\ProgramData\RrpkrisXGdWVTu
[2012/03/26 02:34:31 | 000,361,984 | -H-- | C] ( ) -- C:\ProgramData\RrpkrisXGdWVTu.exe


:Commands
[PURITY]
[EMPTYFLASH]
[RESETHOSTS]
[EMPTYJAVA]
[CREATERESTOREPOINT]
[Reboot]
:Files
ipconfig /flushdns /c

click Run Fix. Reboot your PC and do the following



Download and run Unhide.exe from here

http://www.bleepingcomputer.com/forums/topic405109.html

ralphie

I followed your instructions and they worked.I was missing the start menu but managed to get it back.My start up screen is now black,maybe its the screensaver thats missing.
I think the boot time may be a bit slower,but at least I am back up and running again.
Many Thanks for your help.

ASJ112

good to hear

I'd still recommend running combofix from here

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

ASJ112

unless you are having any more problems, we are all done

open OTL, click the Cleanup button, it will remove itself and combofix


then all done

ralphie

ASJ112 wrote: »

unless you are having any more problems, we are all done

open OTL, click the Cleanup button, it will remove itself and combofix


then all done

Done as above and all is good now.
Its great to have helpful people like you on Boards and is what makes this such a brilliant website.Many Thanks.