Contracted Remon.sys (hacktool.rootkit) from AIM, Help please

[arccabri]

I recently received a virus from a link sent by a buddy. Immediately after clicking on it, norton popped up saying I have a hacktool.rootkit virus, remon.sys. I've looked through the stickies on this page, ive tried the removing hacktool.rootkit method posted but none of the specific files mentioned by that thread was found. When I run Housecall scan online, I get no problems and now, it seems that I am unwillingly passing on the link to others through aim aswell. Hopefully someone can help me. Attached is my HJT log. Thanks

 

[Spike]

Take a look at this thread - it may help. If not, reply back here.

https://www.techspot.com/vb/all/windows/t-33610-Hacktoolrootkit-and-remonsys.html

 

[arccabri]

Thanks for the quick response spike, I looked at that tread and non of the suspect processes or files show up when I run in safe mode. If there is any additional information needed, I will be happy to oblige.

 

[RealBlackStuff]

See the Read: How to.. rootkit post in this forum.

 

[arccabri]

Ive followed the directions on the How to...Rootkit post in the forums and it doesnt seem to apply to my specific circumstance as none of the files, javapanel/taskcenter/xpjava, or processes show up. Any additional support will be appreciated. Thanks

 

[RealBlackStuff]

Did you even bother to get your PC scanned by TM?

 

[arccabri]

yeah, the first time i got it checked by TM, there were some questionable files but none relating to this rootkit virus, i then used the fix utility on the scans and then followed the rootkit removal process. While the rootkit is still there, my next TM housecall scan came up clean.

 

[RealBlackStuff]

Viewpoint, Partypoker, O16's...
Time to go here as well:

Read: How to remove Begin2Search/Coolwebsearch and Other Nasties

 

[Niksolo]

So basically that thread will take care of a good majority of nasties? My fiancee's laptop got the remon.sys (hacktool.rootkit) as well. So I will try that and see if it works, for I had the same problem as arccabri on her laptop.