Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


got infected with ssdt hooks help

  • Please log in to reply
2 replies to this topic

#1 a7medsalim


  • Members
  • 9 posts
  • Local time:03:18 AM

Posted 30 December 2014 - 01:14 PM

got infected with ssdt hooks for a few months now and im sure about it can you please help?

they are slowing and blocking the internet connection i used trials of many av's (kaspersky,bitdefender) but it i dint help its stil slow :(

tell me where to start to remoe em

BC AdBot (Login to Remove)



#2 a7medsalim

  • Topic Starter

  • Members
  • 9 posts
  • Local time:03:18 AM

Posted 02 January 2015 - 03:43 PM

Title was:  Infected with rootkits Has been receiving some assistance in AII here: http://www.bleepingcomputer.com/forums/t/561592/got-infected-with-ssdt-hooks-help/ ~ OB
Hey My pc's internet Running slow and i gotta fix it
got some with rougue killer previously found keyloggers but int there now anyway heres the log one of em cant get fixed it say error:
RogueKiller V10.1.1.0 (x64) [Dec 23 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : finding nemo [Administrator]
Mode : Delete -- Date : 01/02/2015  23:34:57

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 1 ¤¤¤
[Hidden.From.SCM] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\klkbdflt2 (system32\DRIVERS\klkbdflt2.sys) -> ERROR [5]

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: WDC WD3200BEVT-22ZCT0 ATA Device +++++
--- User ---
[MBR] 150820921488a634184027a1c6231c24
[BSP] d8866f2a02f0bc853c16bd01f3682f6d : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 98998 MB
User = LL1 ... OK
User = LL2 ... OK

RKreport_DEL_01012015_162209.log - RKreport_DEL_01012015_162236.log - RKreport_DEL_01012015_162553.log - RKreport_DEL_01022015_191939.log
RKreport_SCN_01012015_162137.log - RKreport_SCN_01012015_162253.log - RKreport_SCN_01012015_162547.log - RKreport_SCN_01012015_162915.log
RKreport_SCN_01012015_195617.log - RKreport_SCN_01012015_195859.log - RKreport_SCN_01022015_191838.log - RKreport_SCN_01022015_205700.log
RKreport_SCN_01022015_233249.log - RKreport_DEL_01022015_233410.log
Malwarebytes Cant Detect anything and the self protection module checking thing is unfuctional its like i cant check or uncheck'em  thanks

Edited by Orange Blossom, 04 January 2015 - 02:01 AM.
Merged topics. ~ OB

#3 nasdaq


  • Malware Response Team
  • 38,376 posts
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:07:18 AM

Posted 04 January 2015 - 10:17 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Please paste the logs in your next reply DO NOT ATTACH THEM unless specified.
To attach a file select the "More Reply Option" and follow the instructions.

What issues are you still having with this computer.

Wait for further instructions.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users