07-08-2009 04:26 PM
07-08-2009 04:29 PM
Before doing the GMER scan, please uninstall Spybot S&D and reboot your machine. Then follow the steps below.
Please download GMER from http://www.gmer.net and run the program. Select "Scan" and then "Save" the log. Do nothing else with the GMER program as it can harm your system if used incorrectly. Then attach the log file as a text file to a post here. The Add Attachments link is below the orange Post button. It will be reviewed for possible malware and we will get back to you. Again, thanks for your help in this.
07-08-2009 07:39 PM - last edited on 07-08-2009 08:29 PM by shannons
I tried running the program you suggested and it didn't work. I've uploaded a screenshot of the error I received. What do you think I should do?
[edit: Resized image to fit screen.]
07-08-2009 08:41 PM
Don't worry about it. A lot of programs are prevented from working by rootkits. It was worth a try to pick out some of the stuff ahead of time. We do need the GMER log as also suggested by Dbrisendine. The link is in his post.
See if it will run. If not at first, try it in safe mode as well.
We have a lot of success with the MSIVX rootkits. It will just take some time as we only have one guru capable of this kind of work.
07-09-2009 05:32 PM
Now (read carefully) If you have Spybot S&D uninstall it.
Also during the restarts with Avenger if Your PC has a Startup repair center like with HP and Toshiba tell it to start Normally if it kicks in.
1. Download Avenger to your desktop,
Unzipped version http://homepages.slingshot.co.nz/~crutches/Avenger
Creators website http://swandog46.geekstogo.com/avenger2/avenger2.h
2. Click to run "Avenger.exe" (right click "Run as Administrator" if using Vista)
3. In the "Input script here:" copy and paste the script between the lines
Drivers to disable:
Drivers to delete:
Files to delete:
Registry keys to delete:
Here is a screenshot (script updated since shot)
Make sure the "Automatically disable any rootkits found" is NOT selected
4. Click "Execute"
You will be asked to restart the PC click "Yes", when the PC restarts the load screen will takes slightly longer, then when it looks as though windows is loading the PC will restart again.
Then when Windows fully loads the Avenger log will be loaded, showing files it could or could not find.
5. Restart the PC again, then see if you can install Update and run Malwarebytes
07-10-2009 05:41 PM
07-10-2009 06:53 PM
The errors for the registry keys is because you don't or won't have all the control sets, silly.
Avenger would have got the rootkit to then allow the other programs to run.
07-10-2009 08:14 PM
What happened to you can happen to any of us at any time. A few things will help. If you are running Norton Antivirus, you need a good compatible two-way firewall. Windows firewall is not good enough. Comodo is often recommended.
Running two real-time antivirus engines at the same time increase, rather than decrease vulnerabilities.
Make sure your Windows is fully patched and updated and all program vulnerabilities are patched.
Nothing is foolproof.