[lars]

Just updated Norman TDSS Cleaner: http://download.norman.no/public/Norman ... leaner.exe

In my tests so far, it cleans the newest 3.273+ (random driver infector). I would love if someone could verify or report any issues ;)

[EP_X0FF]

Just updated Norman TDSS Cleaner: http://download.norman.no/public/Norman ... leaner.exe
In my tests so far, it cleans the newest 3.273+ (random driver infector). I would love if someone could verify or report any issues ;)

Windows XP SP3
NTC works :)

[nullptr]

Just updated Norman TDSS Cleaner: http://download.norman.no/public/Norman ... leaner.exe
In my tests so far, it cleans the newest 3.273+ (random driver infector). I would love if someone could verify or report any issues ;)

Tested on xp sp3 in Virtual PC - successful removal of infection, but for some reason the cleaner saw fit to remove the appmgmt service and its respective dll.

[lars]

successful removal of infection, but for some reason the cleaner saw fit to remove the appmgmt service and its respective dll.

Thanks for testing guys!

Did you notice what the log file said when it removed appmgmt?

[nullptr]

I just realised that I loaded my xp sp3 home image where there is no appmgmt - MS just forgot to remove the service entry, so Norman cleaner was kind enough to remove it for them. :)
In further testing on xp sp3 pro there's no problems with removal.

[lars]

haha. Nice :D

[erikloman]

Just updated Norman TDSS Cleaner: http://download.norman.no/public/Norman ... leaner.exe

In my tests so far, it cleans the newest 3.273+ (random driver infector). I would love if someone could verify or report any issues ;)

I get a BSOD right before rebooting.
Using VMware Workstation 7 with guest Windows XP SP3 + vmscsi.sys as its disk driver.

[lars]

Yikes,

So, you're saying that all is well while it runs and while the system shuts down. And then it blue screens just before rebooting? Does it come back up?

Any chance to obtain a minidump (or any memory dump for that matter)? Log files might help as well.

[erikloman]

I have made a movie of what happens.
I am currently unable to retrieve the memory dump as the guest will no longer boot.
When I have time I'll try to retrieve the file using a boot CD.

[IndiGenus]

I have made a movie of what happens.
I am currently unable to retrieve the memory dump as the guest will no longer boot.
When I have time I'll try to retrieve the file using a boot CD.

Have you tried Last Known Good? My guess and experience with this is it won't work, but it's easy to check.