Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

cant get rid of Rootkit max++


  • Please log in to reply
No replies to this topic

#1 mikemox

mikemox

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:55 PM

Posted 22 December 2009 - 05:22 PM

Recently a few of my brothers friends were over and use my laptop. A security warning started popping up that night but i just shut it down and went to sleep. The next day I started up my computer and in the background of my desktop was a infection warning. So I googled some anti virus software and downloaded and use regrun. i downloaded the free reanimator and ran the scan. a screen popped up saying "you have infected by max++ rootkit befor removing the rootkit we must remove NTFS resparse points. so i accepted and continued the scan. I get rid of all the bad problems it finds and the last one is always the root kit max++. When i try to get rid of it the scan ends and asks for reboot for the changes to take effect. So i reboot and the comp. is just as bad as befor. so i scan it again and rootkit max++ is still there! can anyone help?


results from regrunck
RegRun NTFS Checker 1.0.6
Processing C:\WINDOWS\


Failed to open:
C:\WINDOWS\\System Volume Information
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\System Volume Information
File rigths restored successfully
C:\WINDOWS\\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a
Type is JUNCTION
Final Destination:
C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790

C:\WINDOWS\\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a
Type is JUNCTION
Final Destination:
C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e


Failed to open:
C:\WINDOWS\\Installer\1971fa.msi
Error:32 The process cannot access the file because it is being used by another process.



Failed to query reparse info for:
C:\WINDOWS\\Installer\1971fa.msi
Error:6 The handle is invalid.



Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\0eaed8d713d78954a90c813a5e2c5934\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\0eaed8d713d78954a90c813a5e2c5934\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\1f3207366e96c94d45c070496b08a2d4\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\1f3207366e96c94d45c070496b08a2d4\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\23e79e5fb28793d8cb1c2055b0d8dcb9\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\23e79e5fb28793d8cb1c2055b0d8dcb9\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\2c95b28351986132d7f36dd28eece9b0\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\40fc5c00ee89ac515590995374843d78\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\40fc5c00ee89ac515590995374843d78\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\50e2c72fd814d3841e776dd2c4918260\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\50e2c72fd814d3841e776dd2c4918260\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\58b417d4f9467dc5c1babe51c3278018\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\58b417d4f9467dc5c1babe51c3278018\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\5cfa09586faf6d9470f0c817d855bb6b\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\5cfa09586faf6d9470f0c817d855bb6b\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\5e5aab0184cde550e4ba21f1d2bd377e\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\5e5aab0184cde550e4ba21f1d2bd377e\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\678162639e69c808c1768ab6340eae25\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\71668abe67b6d77ebac6750f25908a6e\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\71668abe67b6d77ebac6750f25908a6e\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\75cd10bc79782317976e2a857798ad9f\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\75cd10bc79782317976e2a857798ad9f\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\78cf8552430e25a8f24bc1e4dfb1970e\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\78cf8552430e25a8f24bc1e4dfb1970e\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\85947e1a809663c7f480717673587a59\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\85947e1a809663c7f480717673587a59\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\8f6570639abf0586cc1aaf1fc76726f6\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\8f6570639abf0586cc1aaf1fc76726f6\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\8fa1ad7968e63408057364ad07aa482c\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\8fa1ad7968e63408057364ad07aa482c\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\97f18c7ac91916468f96bb79c87bff6c\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\97f18c7ac91916468f96bb79c87bff6c\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\9868363812bbe4a0a4d814b7943ba906\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\9868363812bbe4a0a4d814b7943ba906\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\a855eed5ad28db3548ad40195130e787\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\a855eed5ad28db3548ad40195130e787\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\acef69c5a8a4846ded0fc4ea93f74166\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\acef69c5a8a4846ded0fc4ea93f74166\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\b7b0631e184025ba37e5a4ec1d8637e7\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\b7b0631e184025ba37e5a4ec1d8637e7\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\c263092dccc247f68a43cfee93ecc72d\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\c263092dccc247f68a43cfee93ecc72d\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\c6bdb40c9241b85d304fd5cdfbebec2f\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\c6bdb40c9241b85d304fd5cdfbebec2f\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\cfb5c33fcc73ed7dcd60250b085691a5\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\cfb5c33fcc73ed7dcd60250b085691a5\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\d3767eab8f4479a8d252b47e8ec225c8\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\d3767eab8f4479a8d252b47e8ec225c8\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\e15760431e46367ca5a3dfd40a9d03e3\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\e15760431e46367ca5a3dfd40a9d03e3\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\fa2ebe7f385da369070f93700f340c57\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\fa2ebe7f385da369070f93700f340c57\update\update.exe
File rigths restored successfully

Failed to open:
C:\WINDOWS\\SoftwareDistribution\Download\fbadf956b1f29cd6cc8927434ddbc900\update\update.exe
Error:5 Access is denied.



Resetting file rights:
C:\WINDOWS\\SoftwareDistribution\Download\fbadf956b1f29cd6cc8927434ddbc900\update\update.exe
File rigths restored successfully

Edit: Moved topic from XP to the more appropriate forum. ~ Animal

BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users