My computer's defenses started going crazy last night, and after hours of trying to google up possible issues and finding myself continually redirected to ad sites, I did finally find rootrepeal, which revealed SKYNET issues. In addition, I had been using AVG, but deleted it in favor for using ESET's free trial. ESET revealed: Operating memory - Win32/Rootkit.Agent.ODG trojan - unable to clean.
I don't know if they're they same thing or two separate issues, but I can't get rid of either.
I became aware of my issue when SpyBot alerted me that (something).exe (I don't remember what it was anymore, cme or something like that) was trying to run and SpyBot was trying to stop it, then next thing I know, the little windows shield has gone red and is telling me I'm infected and to "click here", then SOME antivirus-looking program started to run which I was NOT familiar with, so I closed it immediately. Found my desktop background changed to a huge picture warning me I was infected with something (no, really??)
From there, I had issues running both Ad-Aware and SpyBot, so I removed them and downloaded malwarebytes and SUPERAntiSpyware, as well as installed NoScript.
ESET, malewarebytes and SUPERAntiSpyware all found things and fixed them (no more wonky desktop background image), but rootrepeal is still showing SKYNET things in my system32 and system32 drivers folder, 6 things hooked in the SSDT scan, a ton of things in the stealthed scan, and ESET is left looking at the Win32/Rootkit like a sad, helpless panda. I tried wiping and force deleting the SKYNET things rootrepeal reveals, but no luck.
So far, it seems like the worst thing its doing is keeping me from using links brought up by search engines, but I'd love help removing it, since everything seems to be pointing to things like ComboFix, which I have no idea how to use.
erm, OS is: Windows XP Professional
Edited by phoenixevanidus, 10 August 2009 - 02:53 PM.