Bagle rootkit problem, new here?

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by croduh, Jun 22, 2008.

  1. croduh

    croduh Private E-2

    Hi,

    Been having this prob afternoon.Identical to some others i have been searching on this forums, my anitvirus and firewall disabled, can't run hijcak this so i run mgtools - here is the log, i think, because it doesn't show some things like in other oens i've found on this forums.
    i have run combo fix and it said it deleted those files in system32 folder but i still have the same problem

    please help me

    oh and my internet doesn't work after 5-8 minutes so i hav to reboot often
     
    Last edited by a moderator: Jun 22, 2008
    croduh, Jun 22, 2008
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You will find the MGTools log here:
    C\MGLogs.zip

    Please attach that after running the SAS and MWB scans and attaching those logs.
     
    TimW, Jun 22, 2008
    #2
  3. croduh

    croduh Private E-2

    Sorry for not being able to respond sooner.here are the zipped logs of mgtools.

    After running combo fix it deleted the files it found as viruses(srosa.sys, hldrr, downl and some others) but my computer is still very slow, nod32 and zone alarm can't start, or be uninstalled, I can run hijack this now (couldn't before).I downloaded avg antivirus but it doesn't report any viruses.
    Superantispyware deleted only some tracking cookies.

    begging for help - m.milin
     

    Attached Files:

    croduh, Jun 23, 2008
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I'd like to see the combofix log as well as the MalwareBytes log.

    None of these files should be where they are....so I am suspicious of them:
    C:\rjeçenje o produ§enom.jpg
    C:\zdravstv..jpg
    C:\mirovinsko rjeçenje.jpg
    C:\drugfa str..jpg
    C:\dsc03252.jpg
    C:\dsc03253.jpg
    C:\dsc03254.jpg
    C:\2..jpg
    C:\2.str..jpg

    I would remove them.

    And what are these:
    C:\Documents and Settings\Marko\My Documents\ADLM
    C:\Documents and Settings\Marko\My Documents\navodnjavanaje
     
    TimW, Jun 23, 2008
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds