Cannot Run Chkdsk From Cmd Box After Malware Hijack.

[David H]

Having just downloaded malware (grassmow and a bunch of others from a bogus adobe update while I wasn't concentrating, having removed most of it and reset my browsers I wanted to do a system restore to try and remove all the remaining junk, and it failed, saying the drive may be corrupt (ie my entire C drive) and should run chkdsk /r as the first step (of how many?) to do an advanced recovery method, which it didn't even specify.

I go in and type the command and was told I do not have elevated status even though no one else touches the computer usually, and it's at my admin level. How on earth am I supposed to let it know it's me, or is this part of the hijack to stop it being removed and impossible to get around?

I have run Windows Defender which found nothing and am on Windows 8.

[David H]

OK, done that and have to restart to get it going, next question, what is the advanced recovery method as I clearly have some kind of garbage attached to the system that can't be undone using the usual methods, thanks!

[berniecuddles]

hi david try this but only use the free version
https://www.malwarebytes.org/

[bhg481]

I'm on Windows 7, but there must be a similar system for Windows 8.

I open the Command Prompt from the start menu BUT not by just clicking on it. I right-click and then "run as administrator". You can then run chkdsk.

[HansUrbancka]

System Restore is Not the answer because any Malware in Operating System could infect the Restore points and cause further problems.

Do as suggested by berniecuddles and report back in this thread.

Hans.

[David H]

An update for general information. I tried Spybot, which found a load of junk missed by Windows Defender but not that, got Malwarebytes which found but it still left a bunch on my search results, I've removed them manually (it wouldn't before with them all) and so far it's gone quiet although this page is running slowly when typing but may be a coincidence. But if you run Malwarebytes check the disc C and then take out the remainder.

[David H]

Thanks everyone, I can now confirm although it found heaps Windows Defender missed Spybot had no defence against the Grassmow but Malwarebytes let me trial the full version for 30 days and everything now looks good, but I did need to search disk C for that and related programs and remove them manually as well, but before the scan that was not possible to do at all.