Im using SpywareDr. Ive done multi scans and click on the fix, only to have the same to malware programs show up ever time. And they are, beside the ADWARE.ADVERTISING COOKIES, AND APPLICATION TRACKING COOKIES IS ROUGE ANTISPYWARE.MALWARE DEFENCE registry key HKEY_LOCAL_MACHINE\SOFTWARE\MALEWARE DEFENCE.
The other one is ROGUE ANTI SPYWARE.PERSONEL ANTIVIRUS HKEY_LOCAL_MACHINE\SOFTWARE\PALADIN ANTIVIRUS.
I went to http:www.bleepingcomputer.com/forums/topic 34773.html, and started following the instructions. It seemed to go fine untill I tried to run the GMER.exe file. First time it ran over a hr and half then all of a sudden my computer rebooted. Second time it ran for a long time also but I kept moving the mouse every now and then thinking my computer rebooted from inactivity the first time but that didnt work either the program and the computer froze up. Other attempts to run the program have pretty much been the same. While ive never got the program to complete I have noticed a lot of files with the word
PRAGMA in it. One such file is SYSTEM32\DRIVERS\PRAGMAHWUHVLXIPO.SYS (***HIDDEN***) And another one is C:\WINDOWS\PRAGMAUXTKOIBFND\PRAGMAD.SYS (***HIDDEN***)
I do get a warrining at the begining of running the program which states, WARNING GMER HAS DETECTED SYS MOFIFICATION BY ROOTKIT ACTIVITY. DO YOU WANT FULLY SCAN YOUR SYSTEM?
I have tried to start in safe mode but that freezes up also. Last driver on the bottom of the frozen page is MULTI(0)DISK(0)PARTITION(1)\WINDOWS\SYSTEM32\DRIVERS\MUP.SYS
Any help will be greatly appreciated TY.
Sorry for the repost I was in a different forum and was told to come here. Im new to this and its not always clear if things have went through. Like ive attached a dds file, and it says, Attachment system ready.
I dont know if that means its been sent or if I have to do something else to send it.
Edited by fyfo, 20 April 2010 - 07:42 PM.