This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Rootkit trying over and over to infect me [Closed]

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

I was installing Microsoft Word from a disk, and afterward I got a "Windows Installer" popup as if my installation wasn't yet complete. It appears that it had nothing to do with my MS Word installation, since Malwarebytes AntiMalware detected a virus and a rootkit after I scanned my computer. I deleted them and immediately rebooted. Now, however, MB is telling me about every 60 seconds that it's detected and quarantined a rootkit that's attempted to infect my computer. This is crazy - there's something on my computer that's still trying to infect me and that MBAM supposedly cleaned out. But it's really still there. I attached a screenshot of the MBAM popup that keeps telling me an infection has been quarantined. Thanks. β€” DISREGARD >> I ran a scanner which evidently found the "Windows Installer" infection and eliminated it. No more popups.
Hi and Welcome!!

My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:

  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.
  • If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it.
  • Please be sure to subscribe to the topic if you have not already done so.
IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data.


Having said that…. [external image: Posted Image] Let's get going!!
β€”β€”β€”-

Looks from the screenshot that you posted that you have the ZeroAccess Rootkit. It is a very nasty piece of work.

Are you still wanting help?

If so…


Please download DDS from either of these links

LINK 1
LINK 2

and save it to your Desktop.
  • Disable any script blocking protection
  • Right-click and Run as Administrator dds to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Please include the contents of the following in your next reply:

DDS.txt

Attach.txt
β€”β€”β€”-

[external image: Posted Image] Please download aswMBR to your desktop.

  • Double click the aswMBR icon to run it.
  • Click the Scan button to start scan.
  • If you are asked to update the Avast Virus database please allow it to do so.
  • When it finishes, press the save log button, save the logfile to your desktop and attach its contents in your next reply.

[external image: Posted Image]
Click the image to enlarge it

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI