BleepingComputer.com: I had a rootkit and plenty trojans

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • This topic is locked

I had a rootkit and plenty trojans

#16 User is offline   blaumann 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 27
  • Joined: 13-September 11

Posted 03 December 2011 - 10:09 PM

It is whatever report when i click on report at the top of the kapersky box. i am running ESET. I did not know to make the setting you require. Maybe you can help me do a screen shot if need be later.

#17 User is offline   blaumann 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 27
  • Joined: 13-September 11

Posted 03 December 2011 - 10:10 PM

If eset finds malware do i clean it or quarentine it?

#18 User is offline   blaumann 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 27
  • Joined: 13-September 11

Posted 03 December 2011 - 10:14 PM

I am connected wired, dsl, no router

#19 User is online   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,790
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 03 December 2011 - 10:17 PM

When in doubt quarantine first,but ESET should automatically do what is needed.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#20 User is offline   blaumann 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 27
  • Joined: 13-September 11

Posted 03 December 2011 - 11:19 PM

Eset scanner found nothing. There did not seem to be the option to save a log.
I still have a redirect in IE when i go to ebay.
Otherwise things are running well.

#21 User is online   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,790
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 03 December 2011 - 11:35 PM

I think we have arootkit and we are moving you. You can attach in this forum.

Please go here....
Preparation Guide ,do steps 6 - 9.

Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
If Gmer won't run,skip it and move on.
Include a link back to this topic.

Let me know if that went well.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#22 User is offline   blaumann 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 27
  • Joined: 13-September 11

Posted 03 December 2011 - 11:55 PM

I am very confused. What does this mean?
"I think we have arootkit and we are moving you. You can attach in this forum."
Does this mean I post the logs back here or what?
What means this? "Include a link back to this topic."
The steps 6-9 will take lots of time. I am very busy with ebay on the weekend. This will happen next week.
Please let me know about my two questions.

#23 User is online   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,790
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 05 December 2011 - 02:34 PM

Ok, perhaps I should have said you can attach things in the new forum.
you will logs post in the new forum.

You have an infection we can not see here.. We need to move to a new forum ,start a new topic with some new logs.
the new logs need to be interpreted to determine the location of the infection.


What means this? "Include a link back to this topic."
Copy this link into your new topic..
http://www.bleepingcomputer.com/forums/topic430286.html/page__pid__2495910__st__15#entry2495910
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#24 User is offline   blaumann 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 27
  • Joined: 13-September 11

Posted 05 December 2011 - 02:50 PM

I am buried in work. I will do this ASAP. Thanks for your help

#25 User is online   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,790
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 05 December 2011 - 04:45 PM

No problem ,it should take an hour to do that,but it may take a couple days for the eam to analyze and reply. We are that busy.. So try to get it posted ASAP.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#26 User is offline   blaumann 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 27
  • Joined: 13-September 11

Posted 05 December 2011 - 06:07 PM

I need a coupole of days to do an hour of paying attention. A busy time for me....
Thanks again for the help.

#27 User is offline   Orange Blossom 

  • OBleepin Investigator
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 29,827
  • Joined: 14-July 06
  • Gender:Not Telling
  • Location:Bloomington, IN

Posted 09 December 2011 - 04:38 PM

Hello,

Now that you have posted a log here: http://www.bleepingcomputer.com/forums/topic431198.html you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.

Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

To avoid confusion, I am closing this topic. Good luck with your log.

Orange Blossom :cherry:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom
An ounce of prevention is worth a pound of cure
SuperAntiSpyware, SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users