Please download GMER
and save it to your desktop:
- Unzip (extract) it to your desktop.
- Disconnect from Internet and close all running programs.
- There is a small chance this application may crash your computer so save any work you have open.
- Double-click gmer.exe to run it.
- Let the gmer.sys driver to load if asked.
- If it gives you a warning at program start about rootkit activity and asks if you want to run a scan... click NO.
- Click the Rootkit tab.
- Make sure all the boxes on the right of the screen are checked, EXCEPT for "Show All".
- Then click the Scan button. Wait for the scan to finish.
- Once done, click the Copy button.
- This will copy the results to the clipboard. Open Notepad and press CTRL + V to paste the log, and save it to your desktop. Attach this log to your next reply.
If you're having problems with running gmer.exe, try it in Safe Mode. This tool works in Safe Mode whereas many other rootkit revealers do not.