MajorGeeks Support Forums IOBit Software

Go Back   MajorGeeks Support Forums > Majorgeeks.Com - Support Forums > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Reply
 
Thread Tools Display Modes
  #1  
Old 05-23-12, 07:55
Messengerrobo Messengerrobo is offline
Private First Class
 
Join Date: Apr 2010
Posts: 33
Thanks: 2
Thanked 0 Times in 0 Posts
Post Rootkit please help

Hello MajorGeeks forums!!

It's been about two years since I last needed to come here, but recently I got this annoying rootkit on my hands and I can't get seem to get rid of it...

I've various scans like and Malwarebytes and spybot search and destroy, but they won't find anything. When I first got the rootkit, these scans did remove some things(probably the viruses that came with the rootkit), but can't find/remove the rootkit itself. I know it's there because when I run a scan with my antivirus(AVG) it always finds the rootkit, but can't do anything about it. The only information it gives me about the rootkit is:

Corrupted section atapi.sys[.text] +0x6852, size 1 bytes

The only symptoms my laptop seems to be showing are that the fan starts getting hot quicker when I run things, and certain websites like Google won't load at all. Also, I'm using Windows XP SP3. Any advice?
Reply With Quote
Sponsored links
  #2  
Old 05-23-12, 17:23
thisisu's Avatar
thisisu thisisu is offline
Malware Consultant
 
Join Date: Apr 2006
Location: Houston, TX
Posts: 8,143
Thanks: 263
Thanked 1,409 Times in 1,348 Posts
Default Re: Rootkit please help

Hello Messengerrobo

Try to complete as much as possible here: How to Remove Trojan:DOS/Alureon.A
__________________
Facebook . Twitter . Blog . VirusTotal
Reply With Quote
  #3  
Old 05-24-12, 09:53
Messengerrobo Messengerrobo is offline
Private First Class
 
Join Date: Apr 2010
Posts: 33
Thanks: 2
Thanked 0 Times in 0 Posts
Default Re: Rootkit please help

I ran TDSSKiller and it seems to have solved the problem; now my antivirus scan finds nothing and Google is working again. Thanks
Reply With Quote
  #4  
Old 05-24-12, 15:05
thisisu's Avatar
thisisu thisisu is offline
Malware Consultant
 
Join Date: Apr 2006
Location: Houston, TX
Posts: 8,143
Thanks: 263
Thanked 1,409 Times in 1,348 Posts
Default Re: Rootkit please help

Quote:
Originally Posted by Messengerrobo View Post
I ran TDSSKiller and it seems to have solved the problem; now my antivirus scan finds nothing and Google is working again. Thanks
Glad to hear it
Surf safely!
If you need additional help just post here.
__________________
Facebook . Twitter . Blog . VirusTotal
Reply With Quote
The Following User Says Thank You to thisisu For This Useful Post:
Messengerrobo (05-25-12)
  #5  
Old 05-25-12, 06:05
Messengerrobo Messengerrobo is offline
Private First Class
 
Join Date: Apr 2010
Posts: 33
Thanks: 2
Thanked 0 Times in 0 Posts
Default Re: Rootkit please help

Ah, one more thing; when I run TDSSkiller now, it finds four suspicious objects (unsigned files):

Service: BTKRNL
Service: btwdins
Service: BTWUSB
Service: FLEXnet Licensing Service

First time I ran the scan I chose the skip option for all of them. Do I need to worry about these, or should I just ignore them?
Reply With Quote
Sponsored links
  #6  
Old 05-25-12, 10:14
thisisu's Avatar
thisisu thisisu is offline
Malware Consultant
 
Join Date: Apr 2006
Location: Houston, TX
Posts: 8,143
Thanks: 263
Thanked 1,409 Times in 1,348 Posts
Default Re: Rootkit please help

Quote:
Originally Posted by Messengerrobo View Post
First time I ran the scan I chose the skip option for all of them. Do I need to worry about these, or should I just ignore them?
Ignore
__________________
Facebook . Twitter . Blog . VirusTotal
Reply With Quote
Reply

Tags
malware, rootkit, virus, windows

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Rootkit help please cpod08 Malware Removal 11 07-04-10 02:04
Rootkit.Agent and Rootkit.Bugle, yeah I know... filipetolhuizen Malware Removal 12 10-03-08 00:16
Rootkit.bagle and Rootkit.Agent - No Internet, No Safe Mode, No Antivirus raremedium Malware Removal 14 04-19-08 22:48
Rootkit Vast41 Malware Removal 5 09-15-06 09:06


All times are GMT -5. The time now is 05:30.


MajorGeeks.Com Home Page
| Admin Tools | All In One | Anti-Spyware | Anti-Virus | Appearance | Backup | Benchmarking | BIOS | Browsers | Covert Ops |
Data Recovery | Diagnostics | Drive Cleaners | Drive Utilities | Drivers | Driver Tools Ergonomics | Firewalls | Games | Game Tweaks | Graphics | Input Devices | Internet Tools | Macintosh | Mail Utilities | Memory | Messaging | Monitoring | Microsoft | Multimedia | Networking | Office Tools | Process Management | Processor | Registry | Security | System Info | Toys | Video | Miscellaneous
|

-->
Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger