PDA

View Full Version : Are these Ok?



Altyran
2013-09-17, 07:57
// info: Rootkit removal help file
// copyright: (c) 2008-2013 Safer-Networking Ltd. All rights reserved.

:: RootAlyzer Results
File:"Unknown ADS","C:\ProgramData:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\All Users:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Public\Pictures\desktop.ini:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Public\Documents\desktop.ini:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\Application Data:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\Cookies:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\Local Settings:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\Templates:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\Documents\desktop.ini:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\Desktop\desktop.ini:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\AppData\Local:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\AppData\Roaming:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\AppData\Roaming\Microsoft\Windows\Cookies:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\AppData\Roaming\Microsoft\Windows\Templates:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\AppData\Local\Application Data:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\AppData\Local\History:gs5sys:$DATA"
File:"Unknown ADS","C:\Users\Altyran\AppData\Local\Microsoft\Windows\History:gs5sys:$DATA"
File:"Unknown ADS","C:\ProgramData\Application Data:gs5sys:$DATA"


I have no idea what most of these mean. =(

tashi
2013-09-18, 00:20
Hello Altyran,

How is the computer running?

In order for someone to advise please see the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) sticky which includes guidelines and instructions in post #2 on how to provide the preliminary DDS and aswMBR logs used for analysis.

http://forums.spybot.info/showthread.php?t=288

Then start a new topic in that forum as shown in the FAQ along with a description of the computer's symptoms and a volunteer analyst will assist when available.

Best regards.