Can't get GMER to Work - Why!?!?
Posted 08 September 2009 - 08:55 PM
FYI ... my laptop is Gateway M-6862 with Vista Home Premuim, SP1, 64-Bit. And I have all the Updates installed as per Microsoft suggestion.
I have downloaded the latest "GMER RootKit Remover 220.127.116.1177" and tried running it and I get the following error ...
"C:\Windows\system32\config\system: The system cannot find the file specified."
But it won't tell me what file is trying to locate!!!
Since I can not attach a jpg ... I have to tell you that I can ONLY see "Services" "Registry" and "Files" on the Right-hand side of GMER program Highlighted ... the Rest of the Options are GREYed out ... so they are not Available!!!
So, I think GMER it does not initialize correctly and it will not allow the "Normal" options to be available.
Q: Can anyone please tell me how to get GMER work properly?
BC AdBot (Login to Remove)
Posted 08 September 2009 - 10:25 PM
Did you download the correct version (I haven't seen a 64-bit version now that I think about it)
The drivers might be different from 32-bit. I'm sure they are in XP. Don't know about Vista.
Posted 09 September 2009 - 10:48 AM
GMER runs on Windows NT/W2K/XP/VISTA
Anti-malware tools and scanners have problems enumerating the drivers and services on 64-bit machines. WOW64 is the x86 emulator that allows 32-bit Windows-based applications to run on 64-bit Windows but x86 applications are re-directed to the x86 \syswow64 when seeking the x64 \system32.
Making the Move to x64: File System Redirection
Any time a 32-bit process attempts to access c:\windows\system32 the WoW64 layer redirects it into c:\windows\syswow64 which contains all of the 32-bit Windows binaries. This prevents a 32-bit process from trying to load a 64-bit binary. Any scripts or tools running in a 32-bit process that is referencing this directory will be automatically redirected to the syswow64 directory.
What problems are you having that you need to use GMER?
GMER is a stand-alone tool that will help investigate for the presence of rootkits. It will not actually tell you if you are infected or not unless you know what you're looking for.
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Posted 13 September 2009 - 08:14 PM
First of all sorry about replying kind of late ... had some family emergencies.
QuietMan ... I just posted my FIX that I found to my Original problem ... which it was Explorer.exe*32 in Windows Task Manager would show that is running at 50% plus all the time for now reason. And in my search on the internet ... everyone was suggesting that those PCs with that problem must indicate that you have a Virus of somekind.
Well, I ran MBAM and SAS in "Safe Mode with Netwrking" as suggested and they both came back clean ... so I was trying to run GMER to catch any Rootkits ... assuming that would Fix my delimma / problem.
It would be great if the GMER Author would consider writing a 64-Bit version for folks like me.
THANKS a bunch for Your Help and Informative Post!