Recurrent, Well-hidden, virulent malware

Welcome to Major Geeks!

It does not sound like you are having malware problems. However to continue I need a better log from MGtools as your log is extremely incomplete. You need to remember to shutdown your protection while running scans!!!! Your ComboFix logs shows that you still had Comodo running and it appears to have interferres somewhat. It may have also interferred with MGtools so shut down ALL of Comodo before doing the below.


Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

• C:\MGlogs.zip

 

You're welcome. Similar to your other logs, there are no infections showing. The problems you mentioned in your first post sound more like you are having problems with Windows itself which means you would be better off posting in the Software Forum. However just to be safe, let's run two more scans and check the logs.



Download TDSSKiller from Kaspersky to your directly onto your Desktop

• Now double click the TDSSkiller.exe file to run it ( if using Vista or Windows 7 do not double click on it but rather, right click and select Run As Administrartor. )
• If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123tdk.com).
  • If you do not see the file extension, please refer to: How to view hidden, system files & folders!
• Allow the application to run if prompted by Windows or any security programs you have installed
• It will start the scan and run rather quickly and will notify you of whether anything is found or not.
• Follow the instructions to delete/quarantine if asks you what to do when if finds something.
• Whether an infection is found or not, a log file should be created on your C: drive ( or whatever drive you boot from) in the root folder named something like TDSSKiller.2.1.1_27.12.2009_14.17.04_log.txt which is based on the program version # and date and time run. Please attach this log to your next reply. (See: HOW TO: Attach Items To Your Post )

Also run this GMER - running with a random name and attach the log from GMER


Why did you first logs show you running this? >>> C:\Users\daniel\Downloads\rmvirut.exe
Did you think you had Virut for some reason?