Help! Rootkit Problem

Welcome to Major Geeks!

Unfortunately you have picked up one of the most recent nasty infections going around that infects some key Windows Operating system files which is the reason why various tools will not run. We need to find out which file has been infected (probably scecli.dll or netlogon.dll) and repair them. To that end, please run MGtools.exe as instructed in the below link:

Using MGtools

After it finishes, attach the MGlogs.zip file that is requested. This will help us find out which file has been corrupted and will also help us locate a possible replacement copy on your PC.

 

Somehow you did not get the newest version of MGtools! We will start a fix anyway and I will give you instructions to get the new version at the end.

Download and save this XPsp2bu.exe to your C:\ root folder. You must do this properly. Now run the XPsp2bu.exe program by double clicking on it. You may or may not notice a quick flash of a black window. This is normal. The program runs quickly and just extracts some files we need.

We will be using a special tool below named Avenger. We will see if we can replace a bad file with a good copy. Also we will attempt to have Avenger run ComboFix automatically at reboot time. Not sure if this will actually will work but be prepared to see ComboFix and allow it to run if you see it pop up.


Now download The Avenger by Swandog46, and save it to your Desktop.

• Extract avenger.exe from the Zip file and save it to your desktop
• Run avenger.exe by double-clicking on it.
• Do not change any check box options!!
• Copy everything in the Quote box below, and paste it into the Input script here: part of the window:

• Now click the Execute button.
• Click Yes to the prompt to confirm you want to execute.
• Click Yes to the Reboot now? question that will appear when Avenger finishes running.
• Your PC should reboot, if not, reboot it yourself.
• A log file from Avenger will be produced at C:\avenger.txt and it will popup for you to view when you login after reboot.

Now put your PC into normal startup mode with MSconfig as we requested in step 4 of the READ & RUN ME.

Now run Ccleaner. Only use the Run Cleaner button. Do not run anything else on any other forms.

Now download the current version of MGtools and save it to your root folder. Overwrite your previous MGtools.exe file with this one.

Run MGtools.exe ( Note: If using Vista make sure UAC is still disabled. Also don't double click on it, use right click and select Run As Administrator )


Then attach the below logs:

• C:\avenger.txt
• C:\MGlogs.zip

Make sure you tell me how things are working now!

 

You're welcome.

Make sure that you apply the below to your new installation:

How to Protect yourself from malware!