Author Topic: I cannot remove a rootkit virus  (Read 3556 times)

0 Members and 1 Guest are viewing this topic.

Offline gosub

  • Newbie
  • *
  • Posts: 15
I cannot remove a rootkit virus
« on: April 16, 2011, 07:00:12 PM »
New to troubleshooying pc problems but i seem to have a bad one

I have a virus called rootkit and have run multiple boot-time scans but virus keeps reappearing
I understand that it is writing to the MBR but does anyone know how to remove this

Apologies in advance but i have never used a forum and am worried i have posted in the wrong area

Please advise if anyone knows which direction i should follow

Thanks in advance for any replies

Regards

David

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40632
  • Dragons by Sasha
    • Malware fixes
Re: I cannot remove a rootkit virus
« Reply #1 on: April 16, 2011, 07:02:30 PM »
Hi run this little programme and post the log please

Download aswMBR.exe ( 511KB ) to your desktop.

Double click the aswMBR.exe to run it


Click the "Scan" button to start scan



On completion of the scan click save log, save it to your desktop and post in your next reply


Offline gosub

  • Newbie
  • *
  • Posts: 15
Re: I cannot remove a rootkit virus
« Reply #2 on: April 16, 2011, 07:28:48 PM »
Tried to post but my reply seems not to post

Attached is the log file requested but i changed the .dat extension to .log to be able to post it. You will need to revert it

Thanks and kind regards

David

Offline gosub

  • Newbie
  • *
  • Posts: 15
Re: I cannot remove a rootkit virus
« Reply #3 on: April 16, 2011, 07:40:44 PM »
I think the log file posted has the same virus on it so please beware when viewing the log file

I have done a screenshot also, see attached file.

Is there any way of finding out how i got the virus

Regards

David

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40632
  • Dragons by Sasha
    • Malware fixes
Re: I cannot remove a rootkit virus
« Reply #4 on: April 16, 2011, 08:26:18 PM »
OK that answered the question


Re-Run aswMBR

Click Scan

On completion of the scan

Click the   Fix Button [color="#FF0000"]




Save the log as before and post in your next reply

Offline gosub

  • Newbie
  • *
  • Posts: 15
Re: I cannot remove a rootkit virus
« Reply #5 on: April 16, 2011, 09:15:05 PM »
I accidentally closed after running fix so ran it again

See attached screen for results

In case this is concluded can i thank you kindly for your swift help with my problem

Kindest regards

David

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40632
  • Dragons by Sasha
    • Malware fixes
Re: I cannot remove a rootkit virus
« Reply #6 on: April 16, 2011, 09:16:38 PM »
That looks good - any other problems ?

Offline gosub

  • Newbie
  • *
  • Posts: 15
Re: I cannot remove a rootkit virus
« Reply #7 on: April 16, 2011, 09:19:31 PM »
None at all unless you know how to reduce mortgages without banks knowing

I am sincerely impressed and thankful for your support with this

I can't thank you enough on fix and turnaround time

Regards

David 'Gosub'

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40632
  • Dragons by Sasha
    • Malware fixes
Re: I cannot remove a rootkit virus
« Reply #8 on: April 16, 2011, 10:02:06 PM »
No problem that was an easy one  ;D

Offline gosub

  • Newbie
  • *
  • Posts: 15
Re: I cannot remove a rootkit virus
« Reply #9 on: April 16, 2011, 10:12:54 PM »
Easy or not, your knowledge was offered in great time and i am very grateful

Regards

David