Hi I also have the same problem with the rotscx rootkit
I can't run combofix and I can run SAS but I think something stops it. It is listed under processes in task manager but nothing actually runs. I've tried doing it in safe mode and renaming the exe files. I downloaded and ran malwarebytes and it detected a rotscx file and deleted it on restart but I think it just jumped somewhere else and the problem is still present. I've scanned it again with malwarebytes and it comes up clean (same with hijackthis, which I know how to read) but a window keeps popping up for every single program that starts (explorer, firefox, taskmanager etc). I've attached the pic
running combofix and SAS yield the same results as before.
btw I'm running vista
Could you PM me a script as well? or provide me with a script where all I have to do is fill in the blank?
Thanks in advance!