PDA

View Full Version : Help With Malware(may be rootkit) removal



aloukar
2009-09-15, 14:26
Hello,

I 'm looking for help, i think i 've got a malware.

when i'm trying to install spybot, HJT the permisson file is altered and i have this message
"windows cannot acces the specified device, path or files, you may not have the appropriate permisson to acces this file"
so i cannot supplie a log from HJT.

somone can help me to resolve this issue please

Shaba
2009-09-17, 21:04
Hi aloukar

Please save this (http://download.bleepingcomputer.com/rootrepeal/Win32kDiag.exe) file to your desktop. Double-click on it to run a scan. When it's finished, there will be a log called Win32kDiag.txt on your desktop. Please open it with notepad and post the contents here.

aloukar
2009-09-18, 02:27
hey shaba

I'm sorry but i have open 2 thread, the second is there http://forums.spybot.info/showthread.php?t=51835

i get some help from ken545 but this rootki is very nasty, when i start windows xp i'm pretty sure the rootkit start first and set him up before the explorer.exe

Shaba
2009-09-18, 07:03
So then you will be continuing with ken and I will close this one :)