MY COMPUTER HAS SLOWED DOWN LATELY SO I USED KASPERSKY INSTEAD OF NOD32. THE ANTIVIRUS PROGRAM FOUND A ROOTKIT ( rootkit.win32.agent.Ixc) LOCATED IN C:\ WINDOWS\system32/drivers/SKYNETvkbfpmbp.sys. KASPERSKY IS TRYING TO NEYTRALIZE IT, THEN RESTARTS BUT THE THREAT IS STILL THERE AND CAN NOT BE REMOVED. I WOULD BE OBLIGED IF YOU COULD SUGGEST ME A WAY OF GETTING RID OF THIS THREAT. SHOULD I FORMAT THE DISK? THANKS A LOT IN ADVANCE.
Let's see if we can get you cleared up without the need to re-format.
Please download DDS and save it to your desktop.
Disable any script blocking protection
Double click dds.scr to run the tool.
When done two logs should open:
DDS.txt
Attach.txt
Save both reports to your desktop.
—————————————————
Post the contents of the DDS.txt report in your next reply
Attach the Attach.txt report to your post by scrolling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and then click UPLOAD.
Download the GMER Rootkit Scanner. Unzip it to your Desktop.
Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.
Right-click gmer.exe and select Run As Administrator. The program will begin to run.
**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<— ROOKIT"entries unless advised!
If possible rootkit activity is found, you will be asked if you would like to perform a full scan.
Click NO
In the right panel, you will see a bunch of boxes that have been checked … leave everything checked and ensure the Show all box is un-checked.
Now click the Scan button. Once the scan is complete, you may receive another notice about rootkit activity.
Click OK.
GMER will produce a log. Click on the [Save..] button, and in the File name area, type in "GMER.txt"
Save it where you can easily find it, such as your desktop.
