[Closed] Malware "Your system is infected"

2 min read

This thread's last reply is from January 20, 2010, 5:54 PM UTC. Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? ✨ Ask AI

oldman960

Post #2January 15, 2010, 5:48 AM UTC

Hi , welcome to the forum.

To make cleaning this machine easier

• Please do not uninstall/install any programs unless asked to
  It is more difficult when files/programs are appearing in/disappearing from the logs.
• Please do not run any scans other than those requested
• Please follow all instructions in the order posted
• All logs/reports, etc.. must be posted in Notepad. Please ensure that word wrap is unchecked. In notepad click format, uncheck word wrap if it is checked.
• Do not attach any logs/reports, etc.. unless specifically requested to do so.
• If you have problems with or do not understand the instructions, Please ask before continuing.
• Please stay with this thread until given the All Clear. A absence of symptoms does not mean a clean machine.

Go HERE to get a new copy. Scroll down to the Download section and click Download EXE. Save it to your desktop.

Before scanning with GMER, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.

• Double click on the file you downloaded. If asked to allow gmer.sys driver to load, please consent .
• If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.
  
  [external image: Posted Image]
  Click the image to enlarge it
  
• In the right panel, you will see several boxes that have been checked. Uncheck the following …
  • Sections
  • IAT/EAT
  • Drives/Partition other than Systemdrive (typically C:\)
  • Show All (don't miss this one)
• Then click the Scan button & wait for it to finish.
• Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  
• Save it where you can easily find it, such as your desktop, and post it in your next reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries



Please rerun DDS

• Disable any script blocking protection
• Double click dds.scr to run the tool.
• When done, DDS.txt will open.

Please post it's contents in your next reply.

Please post back with

• GMER log
• DDS.txt

Thanks

oldman960

Post #3January 18, 2010, 4:07 AM UTC

Hi, Do you still need help with this? Thanks

oldman960

Post #4January 20, 2010, 5:54 PM UTC

Due to inactivity this topic will be closed. If you need help please start a new thread.