I'm probably infected with a some sort of trojan\Rootkit.
I'm experiencing windows explorer hangs, at first i related it into drive fragmentation or temp files, eventually i started doing some deep scans with some anti virus software(avira and kaspersky), and then resorted into malwarebytes, superantispyware and finally combofix, combofix took a very long time to scan(over an hour), and a very long time to produce logs after a reboot.
Combofix led me into the right path as it found and deleted files located in C:\Documents and Settings\All Users\Application Data\Microsoft\downloader\ called Qmgr01/00.dat. which lead me to this forum after googling the files names. ( found a thread of someone being instructed into clearing those files with avenger)
This files are not microsoft native and i havnt seen them on any other machine(im a sys admin in a 140 PCs based network).
This files keep coming back everytime i reboot, even after a combofix scan.
Please tell me what should i do to get rid of this annoying malware.
I've taken some steps to at least make my pc useable while we get this fixed.
I've disabled all startup entries and all non microsoft services.
ran combofix twice whicn returned no results, though it ran for a very long time(over 2 hours) and also log generation was pretty log(more then an hour).
im attaching the combofix log and an hijackthis log.
please advise what other scans you need.
EDIT: Posts merged ~BP
Edited by Budapest, 17 October 2010 - 04:27 PM.