BleepingComputer.com: RootRepeal

I am about to post a topic in HJT Forum so I followed the preparation guide which includes downloading and running RootRepeal. Unfortunately, when I run RootRepeal, an error message pop-up saying "Decompression error (5)!". What went wrong?

Edit: Moved topic from Tutorials to the more appropriate forum. ~ Animal

Try running one of these two


Please download RSIT by random/random and save it to your Desktop.
Note: You will need to run this tool while connected to the Internet so it can download HijackThis if it is not located on your system. If you get a warning from your firewall or other security programs regarding Rist attempting to contact the Internet, please allow the connection.

• Close all applications and windows so that you have nothing open and are at your Desktop.
  
• Double-click on RSIT.exe to start the program.
  
• If using Windows Vista, be sure to Run As Administrator.
  
• Click Continue after reading the disclaimer screen.
  
• Leave the drop down box set to default: "List/folders created or modified in the last 1 month (30 days).
  
• When the scan is complete, a text file named log.txt will automatically open in Notepad.
  
• Save the log file to your desktop and copy/paste the contents into a new topic in the HijackThis Logs and Malware Removal forum, NOT here.

Important: Be sure to mention that you tried to follow the Prep Guide but were unable to get DDS to run.
If RSIT did not work, then reply back here.

---------------------------

If you cannot get DDS to work, please try this instead.

Please download runscanner.zip and save to your desktop.

• Create a new folder on your hard drive called Runscanner (C:\Runscanner) and extract (unzip) the file there.
  (click here if you're not sure how to do this.)
  
• Double-click Runscanner.exe to launch.
  
• Select Beginner mode and click Ok.
  
• Select Do a full scan and save a log file (default is Full Scan) to start.
  
• Please be patient and do not use your computer during the scan.
  
• When the scan is complete, a window will open asking you to save runscanner.run. Click Cancel.
  
• Another window will open asking you to save runscanner.log.
  
• Save it to your desktop and "Save as type: Runscanner log file [*.log].
  
• The log file will automatically open in Notepad.
  
• Go to the top menu, click on "Format" and uncheck "Word Wrap" if checked.
  
• Copy and paste the contents of the log file into a new topic in the HijackThis Logs and Malware Removal forum, NOT here.
  
• Exit Runscanner when done.

Important: Be sure to mention that you tried to follow the Prep Guide but were unable to get DDS to run. If Runscanner did not work, then reply back here.

That error seems to indicate a problem with RootkitRepeal unpacking, which is usually a problem on the programmer's end, but it is hard to say if that is the case here. Bottom line is if you can get the DDS file to work go ahead and post its log and then post the fact that you can't get RR to work. The sooner you get in line for help the better, then your helper should have some ideas of what to do with RR.

Or, you can contact the developer yourself.

Quote

http://rootrepeal.googlepages.com/