Inactive YASCT (Yet Another System Check Thread)

[pacmanfan]

I am infected by System Check. This is the first malware I've gotten since I installed Windows 7 x64 over 26 months ago! It came in while someone was using the Guest account (Standard User). When I came home and discovered the infection, I logged off the guest account, logged into another standard user account and attempted to update MSE. MSE refused to update, citing a possible system or registry error (paraphrased). I promptly shut the system down, and will leave it shut down until I have a plan of attack.

MSE is the only security software currently installed. It was last updated about 05:00 on 2012/01/04. I can readily pull the hard drive and scan it from another system, if there is an effective procedure for removing the malware in this manner.

 

[pacmanfan]

After further reading, it is apparent that a rootkit is responsible for my inability to update MSE. Unless there is a known path to eliminate this rootkit, I will probably begin the process of reformatting tomorrow night.

 

[Broni]

Welcome aboard

Please, complete all steps listed here: https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.
Complete as many steps as you can.

Please, observe following rules:

• Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
• If you're stuck, or you're not sure about certain step, always ask before doing anything else.
• Please refrain from running tools or applying updates other than those I suggest.
• Never run more than one scan at a time.
• Keep updating me regarding your computer behavior, good, or bad.
• The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
• If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
• I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

 

[pacmanfan]

After further consideration, I decided it was safest to reformat my OS drive, since it was evident I had a rootkit.

 

[Broni]

Thank you for letting me know