Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Globalroot/Systemroot has taken control

  • Please log in to reply
4 replies to this topic

#1 marcushurst2002


  • Members
  • 2 posts
  • Local time:12:23 AM

Posted 21 December 2009 - 10:45 AM


My p.c has a virus that Norton didnt seem to protect me against. Any idea how to remove it?

The first message is

globalroot/systemroot/system32/h8srtwfskbmemlt.dll is not a valid image please check against installation diskette

This is followed by a whole load of other bad image messages

Its completely taken control of my p.c - I can no longer access the internet!

Please help

EDIT: Moved from XP forum to a more appropriate forum as suggested by hamluis ~ Elise

Edited by elise025, 21 December 2009 - 01:36 PM.

BC AdBot (Login to Remove)


#2 hamluis



  • Moderator
  • 56,565 posts
  • Gender:Male
  • Location:Killeen, TX
  • Local time:11:23 PM

Posted 21 December 2009 - 12:16 PM

Hi :thumbsup:.

I've made a suggestion that your post be moved to one of our malware forums...please take all further instructions from the personnel there, regarding posting, administrative requirements, etc.

They are very good and slightly overworked...so be a little patient.





  • Members
  • 196 posts
  • Gender:Male
  • Location:Leicester, United kingdom
  • Local time:06:23 AM

Posted 21 December 2009 - 02:13 PM

is there any way of you getting a file on to the infected machine via a CD or USB Disk?
Microsoft Certified Desktop Support Technician

#4 boopme


    To Insanity and Beyond

  • Global Moderator
  • 73,573 posts
  • Gender:Male
  • Location:NJ USA
  • Local time:12:23 AM

Posted 21 December 2009 - 04:24 PM

Or run it off the CD or USB

If you cannot use the Internet,you will need access to another computer that has a connection.
From there save mbam-setup.exe to a flash,usb,jump drive or CD. Now transfer it to the infected machine, then install and run the program.
If you cannot transfer to or install on the infected machine, try running the setup (installation) file directly from the flash drive or CD by double-clicking on mbam-setup.exe so it will install on the hard drive.
Manually Downloading Updates:
Manually download them from HERE and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.

Try running RootRepeal also as you have a rootkit.
We Need to check for Rootkits with RootRepeal
  • Download RootRepeal from the following location and save it to your desktop.
  • Extract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).
  • Open Posted Image on your desktop.
  • Click the Posted Image tab.
  • Click the Posted Image button.
  • Check all seven boxes: Posted Image
  • Push Ok
  • Check the box for your main system drive (Usually C:), and press Ok.
  • Allow RootRepeal to run a scan of your system. This may take some time.
  • Once the scan completes, push the Posted Image button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 marcushurst2002

  • Topic Starter

  • Members
  • 2 posts
  • Local time:12:23 AM

Posted 22 December 2009 - 04:24 AM

Many thanks boopme ... I will try tonight and let you know how I went ...

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users