First of all, thank you kindly for helping. I'm at my wit's end with this...I've been using the same suite of protection programs for over two years and this just started. I have the newest Avast free, I just downloaded the new MBAM, checked the rootkit box, ran a scan and it found this:
Malwarebytes Anti-Malware
www.malwarebytes.orgScan Date: 4/18/2014
Scan Time: 5:04:22 PM
Logfile:
Administrator: Yes
Version: 2.00.1.1004
Malware Database: v2014.04.18.07
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled
OS: Windows XP Service Pack 3
CPU: x86
File System: NTFS
User: Jeffrey
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 229192
Time Elapsed: 5 min, 30 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Shuriken: Enabled
PUP: Warn
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 1
PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, Quarantined, [05fb34ccd22ed030d0e22c55679b5da3],
No other malicious items found
(end)
I quarantined the PUP. Is this what was causing the swcustcfg rookit message in Avast ? I notice Avast doesn't pop up a warning window every now and then like it used to, but it stopped after I updated it. Nevertheless, an Avast scan still finds this. Is this a false positive or do I have a real rootkit here, can you tell? If you need more info, you email me direct at jeff@tcconsult.net
Thank you.