AVAST detected a rootkit, help please

poppie123

aliEnRIK wrote: »

Poppie

please keep to running sophos

I am, its still scanning. It's taking forever

aliEnRIK

Please dont scan with anything else whilst using sophos

poppie123

aliEnRIK wrote: »

Please dont scan with anything else whilst using sophos

Oh god, i think Malwarebytes was running at the same time. Does this mean i have got to stop Sophos and start again? :sad:

aliEnRIK

no no

Just keep running sophos

poppie123

aliEnRIK wrote: »

no no

Just keep running sophos

Thank god for that :rotfl: It seems to get near the end and then the bar goes backwards at bit. Arrrrrr
Patience never was my strongpoint.

aliEnRIK

It might be that it runs for hours

Id chill out if I were you

poppie123

aliEnRIK wrote: »

It might be that it runs for hours

Id chill out if I were you

:eek: HOURS!!!!

aliEnRIK

Your call poppie

or you can take it down to the guy down the road thatll probably wipe your drive losing you everything and charging you 60 quid

poppie123

aliEnRIK wrote: »

Your call poppie

or you can take it down to the guy down the road thatll probably wipe your drive losing you everything and charging you 60 quid

No no, i am sticking with you. Just hope i can get rid of it. :sad:

All my problems started when last friday Avast blocked a trojan horse whilst i was browsing ebay. I have never really had any problems up until then. I've been doing online banking and all sorts since then though. :eek:

poppie123

Right it has finished doing its scan and nothing happened. I dont think it deleted anything at all although there are quite a few of the hidden files.All the ones hidden that it has found it says clean up not recommended for that file.

I have clicked on this one to show you what it says (there are a few of these C:\##aswsnx private storage)

Area: Local hard drives
Description: Unknown hidden file
Location: C:\## aswSnx private storage\snx_rhive{12470a48-499f-11e0-9631-00038a000015}.TMContainer00000000000000000001.regtrans-ms
Removable: Yes (but clean up not recommended for this file)
Notes: (no more detail available)

What shall i do now, shall i run combofix again even though this scan hasn't cleaned anything up?