I have a serious infection

samdd

GunJack wrote: »

good news, but just before you finish......

go to Computer, right-click on your hdd and do a disk cleanup (or run CCleaner if you have it, both cleaner and registry cleaner parts), and as a final belt'n'braces I'd run combofix to ensure the last of the carp is blitzed

The CCleaner is a brill bit of software.. Did both scans before reboot to clear out the crap fromf the registry. I also like to clear the cache once a week to keep FF running fast by using the 'ipconfig /flshdns' command to flush the dns resolver cache via the Admin dos shell.


Ill do a combofix run a little later when ive cought up on my emails... :rotfl: Thanks for your help

samdd

waddler_8 wrote: »

I'm not convinced you are clean. The TDSS rootkit was removed but I've not seen anything yet to say that zero access has. The detections by mbam look like fresh malware.

Thats what i thought and wondered where it had come from.. what do you recommend ? The system is running sweet though..

GunJack

waddler_8 wrote: »

I'm not convinced you are clean. The TDSS rootkit was removed but I've not seen anything yet to say that zero access has. The detections by mbam look like fresh malware.

this is exactly why I suggested running combofix, should clear out most stuff else. Actually, OP, you'd downloaded hitman pro haven't you ?? Hold down left Ctrl key and start hitman whilst holding it down..quick scan time and has supposedly been updated to get the ZA rootkit.

Do both to be high% sure

samdd

GunJack wrote: »

...and then go to windows update, it looks like you're at least a service pack behind

I did check earlier but the only update i needed was IE related. Im not sure but there is only sp1

samdd

GunJack wrote: »

this is exactly why I suggested running combofix, should clear out most stuff else. Actually, OP, you'd downloaded hitman pro haven't you ?? Hold down left Ctrl key and start hitman whilst holding it down..quick scan time and has supposedly been updated to get the ZA rootkit.

Do both to be high% sure

ok ill do it now

samdd

ok so, i've run Hitman pro 3 times.. its gets to 99% and then stops working before crashing. Going to try Combofix now....

waddler_8

If it runs, post the log it produces.

samdd

Combofix seems to be deleting an awful lot of files.. User\***\ spkpod\incoming\ filth and games website that iv'e never been anywhere near.. Ill post the log when finished...

GunJack

sure sign you weren't as clear as you thought

Be interesting to see the log when it's done

samdd

before Combofix would run it removed a vurus, not sure what it said as it was to fast for me, but i did see the word Rootkit before it closed down to remove the infection. Its been deleting files for about 7 mins now and still going..

How come i have so many filth websites in my system? If plod were to see what im seeing bing deleted then id be locked up... lol