If you are able to delete sdra64.exe and the other .dat file via a boot disc; then once you get rid of sdra64.exe in the registry, you should be able to run the rest of the steps in the sticky to clean up... I have read that avast free antivirus and or kapersky will do it, but if mbam will run after deleting the files and registry values; update it and allow it to clean and fix anything, also recommend following judy's instructions for combofix after getting rid of these files the hard way.
I think this one sdra64.exe is stopping the rest of your clean up applications, it's probly a rootkit and will load with windows in both safe mode and normal mode, that's why it's difficult to get rid of; the userinit registry value is why it won't delete; because that is saying it's a system/protected file, to load and run the file when windows boots; and the other value in the previous scan that says "disable regedit=1" means that regedit is disabled.. If you try to change the registry in normal mode with the file still remaining on the computer, it will fix itself nearly instantly. It has to be done in safe mode; after deleting the bad files from a non infected boot disc that is able to read the NTFS partition with full read/write permissions; that's why it's best to use your windows installation disc and log into the recovery console as administrator.
Reply With Quote
Originally Posted by JudyP
