Avast recommended to remove it and do a scan on reboot, so I took of for a while to watch some television while the startup scan was running.
When I got back there was a screen that said Windows couldn't start up so I had to use system restore... I ran another scan and the rootkit was still there. According to the scan it created a log file, but since the restore point I chose was created during the installation of Avast and Avast was removed by the system restoration, there is no log file from it to upload.
Thing is, because I had a lot of registry errors I set my computer back to factory settings earlier today, but there was some interruption during the re-installation I didn't pay enough attention to.
I assume the rootkit was on my computer BEFORE re-installing it too, because I still have the same issue I described in this topic http://www.bleepingcomputer.com/forums/topic418481.html, which might be a symptom of that rootkit (?).
Anyway, how do I get rid of this thing and make sure I can get my computer to normal again (I don't care for re-installing again, as long as I know for sure that the problem (probably just that rootkit) will be gone after that).
Other things indicating problems besides the Avast detection:
- Checkdisk gave me a WARNING: F PARAMATER NOT SPECIFIED when I ran a scan after re-installation
- SFC /SCANNOW in command prompt indicated that there were some registry errors that couldn't be fixed. Unfortunately, when I tried to open the log file it told me "acces denied".
- The USB-format problem described here http://www.bleepingcomputer.com/forums/topic418481.html
- The "f parameter" error showed up before re-installing when I tried to switch on system restore which for some reason was turned of (not sure if it was done by the malware or something really stupid I did to make my computer lose less disk space or keep it faster or something).
- I've a Sony Vaio running Vista 32 bit
Right now I'll keep my laptop on stand by, because there is a new popup from Avast telling me it's recommended to remove it and restart my computer again. But since that didn't work out about one and a half hour ago I think I'll wait until I get some help here...
EDIT: I decided to let Avast give it another try, it said it would remove it, but when vista started up it said my computer had been succesfully restored to yesterday evening's restore point (I didn't have to choose to use system restore, it automatically did it). A new scan showed the rootkit is still there, so Avast didn't do anything useful.
Edited by G2442g, 12 September 2011 - 03:13 AM.