Problems with virus, please help..

[schenne]

Hi.
I´ve got som problems with my computer.
I did all the scannings with the programs you recommended and I include my logs.
The result from AVG Anti-RootKit Free LOGresults

C:\Windows\system32\drivers\ag9zlaOe.SYS Hidden driver file (Rootkit type)

I´ve got theese problems:
1. When I´m on the internet I often got a popup-site:
http://c5.zedo.com/jsc/c5/ff2.html?n=377;c=216;s=36;d=22;w=800;h=600
It´s so frustrated...

2.
My computer is slow on the Internet

3.
I´ve got pup-up messages like (in swedish so my translation isn't soo good..): explorer.exe User/J/TMPE786.tmp (example) isn't designed to run on Windows or it´s installed wrong...

4. When I push my Internet explorer icon on the desktop I got this error message: It´s impossible to find :: (2559A1F4-21D7-11D4-BDAF-00C04F60BF0). Control that you had indicate the right searchway or Internet adress. (This is maybe not a virus thing or?? maybe you got an solution?)

When I did all the scannings it seems to run a little bit smoother but please look in my logs and see if there´s more to erase.

Thanks, my first message here
schenne

 

[schenne]

One more thing, I also get this message often:

"ndt2.sys has stopped working"..got it right now acyually..

 

[kimsland]

SuperAntispyware should get rid of ndt2.sys
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE

Download / Update / Full Scan

As this will affect your logs/txt, you will need to re-submit them

 

[schenne]

Hi!
Back from the travelling
I´ve did a full scan with that program and here´s the logs, once again.

My scan with AVG RootKit now gives me this:

c:\windows\system32\Drivers\aaz7a8lz.SYS Rootkit type: Hidden driver file

From my list number 4 still exist. Any suggestion?
And last, how´s my logs then? Is they clean now?
Thank´s for your time.

schenne

 

[kimsland]

Umm No

Here's a Free Rootkit cleaner: http://free.grisoft.com/doc/downloads-products/us/frt/0?prd=arw

I would also suggest Ad-Aware and Spybots Search & Destroy

At this stage you must refer to:-

Viruses/Spyware/Malware, preliminary removal instructions
https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/

 

[schenne]

Just one question:

Shall I remove this or not:
My scan with AVG RootKit now gives me this:

c:\windows\system32\Drivers\aaz7a8lz.SYS Rootkit type: Hidden driver file

 

[kimsland]

Yes

Actually to be safe, rename aaz7a8lz.SYS to aaz7a8lz.OLD

Restart, no errors
Then delete