Trajan & rootkit issues

I have had issues with another computer for a while now, and it has spread to this computer which I am now attempting to save in hopes of avoiding further spreading. I have run the procedures recommended in your malware removal guide, and am attaching the logs.

As for what the computer has been doing, there really haven't not been any symptoms other than a general slowing and my anti virus recently finding the "Eldorado" virus after about a month of using files from another infected computer. I really don't know how the other computer was infected, there were no emails opened on that computer, no potentially hazardous sites visited unless you count Google Images to collect clipart for children's program advertisements. Not exactly porn there. No videos of any kind watched aside from youtube.com. To my knowledge there is no illegal software present. I will hopefully be running the same process on that infected computer and will post it's results in a separate post. For this computer I am simply trying to prevent it from getting as bad as the other one.

The procedure I performed on this computer followed the instructions outlined in your cleaning guide, with a couple of minor glitches.

1) SuperAntiSpyware preformed fine with no issues.

2) MalwareBytes also preformed well with no issues.

3) ComboFix ran once, informed me that it needed the Windows Recovery Console, attempted to install and failed. It completed scaning, and after it completed it's scan and produced a log, I manually downloaded and installed the Windows Recovery from Microsoft as per the instructions. This resulted in another ComboFix scan and another log. I then realized that I had run both scans without the external hard drive hooked up that had transmitted the virus in the first place, so ran a third ComboFix scan with the external hard drive hooked up. My apologies if that causes problems from running too many times.

4) RootRepeal ran for a short time and then seemed to freeze and didn't show any activity for over an hour. I thought that it was stuck and attempted to restart the scan making sure to disable all AV that might be interfering. After a second scan produced the same results, I abandoned scanning with it and moved on to the next step. I did however come back and run another scan after the MGtools scan, which I left for about 2.5 hours, this time it completed and produced a log.

5) MGtools scanned fine, unfortunately I forgot to make sure that external hard drive was connected before running the scan, so I ran a second scan with it connected. I don't know which set of logs was included in the zip file, but I'm assuming it was the second scan and the first was overwritten - I hope.


I really don't know if all problems are resolved or not due to the lack of early symptoms. On the other infected computer it took over two months for it to begin showing real symptoms beyond slowness, which included browser crashing, download failure and installation failure. I'm hoping to avoid that this time ! Any assistance would be appreciated and I look forward (patiently) to an analysis of the issues. Thank you very much for your help !

Joyfulsong11

 

Thanks TimW.

Sorry the logs weren't included earlier, I couldn't get back to my original post to add a reply. Here are the other logs from the previous scans, and I'll move the ComboFix and post the scan log from that later.

Joyfulsong11

 

Here are the two log files you requested.

 

Here's the zip file from MGtools. Thanks for all the help, things do seem to be running A LOT faster ! Amazing the difference cleanliness makes ! These tools are great, I'll be starting on the computer that got the original virus soon, the one from which this computer was infected. Thanks so much, and let me know if there's anything else I need to do. These tools are great, and I'll definitely keep them in mind for friends when they have problems too.

Joyfulsong11

 

Thanks so much for all the help. All seems to be working well, and the peace of mind from knowing the machine is clean is a HUGE weight off !

Joyfulsong11