Posted 30 March 2011 - 05:05 PM
Hi all, I hope someone can give me an idea on what to do. I am by no means a novice with PC's but this has me.
Initially, I leave my PC on during the day while I'm at work, but I have it locked (I sometimes remote in from work). One day I came home and there was not just my login icon, but one for Administrator (with a frog icon). I was a bit miffed, so I went to restart to see what would come up and it said I have a user(s) connected and do I want to still shutdown. I did and I think that time it came back after reboot. I ran Spybot and then ran Malbytes and after that it went away. Then a week or so later it was back. I talked to a person in the helpdesk at work and he had me run (I didn't know not to run this before I came here) Combofix and VipreRescue. Combofix did have a list, but there were no hidden listed, nor did it correct anything and VipreRescue does list also and says it finds fragments(?), but does not clean anything. I have also tried RootKit Buster and it also lists things, but shows no hidden items and it also does not clean anything. I continue to run Norton Internet 2011, Spybot, SuperantiSpyware and Malbytes (sometimes Malbytes gets a half hour in and crashes). All these programs ever find is tracking cookies. I was going to try another rootkit killer (Kaspersky) until I read your forums about these (unless this one is ok).
To add another twist, I came home yesterday and restarted my PC and Windows wanted me to re authenticate. It said I had made major hardware changes (which I didn't). The only thing was the Recovery console Combofix wanted. I'm not sure if that was from running any of the detection or not. But as I said, none of the rootkit programs (or ones that also search for rootkits) say they removed anything. I am really stumped!! Can anyone help? I do appreciate ANY help!!
I have Windows XP Pro SP2 and have 130 GB free on my main drive. It also might be of interest that I have no problem updating antivirus programs or going to their sites. The only major program I have installed lately was iTunes. Please let me know if you need any other info from me!!!