Posted 22 August 2008 - 10:56 AM
I am a windows xp user and believe I have a rootkit problem. First thing i noticed was that abc and spybot could not update (couldn't connect to server). My searches with firefox appear normal however if i click on a result i get redirected to another search. I can copy/paste the url of the search result and get what i want. Every security related site is blocked. Including this one. I have to use another computer to download anti-spy stuff. I get a "Failed to connect" Only happens to security sites.
Sorry I can't post logs until i figure out how to unblock urls.
I was able to download "rootkit reavealer"
it found tdssserv.sys timestamped 8/9/08, which is about when i noticed the problem.
I ran HijackThis, it is pretty full of entries (again I can't post a log yet)
I had to download these files on another computer. I also installed combofix and accidently ran it when i transfered it from a cd. It runs for a second and then reports "combofix had detected the presence of rootkit activity and needs to reboot the machine. It does then boots normally and combofix does nothing else. I did install "windows recovery console"
Any help is appreciated.