Rootkit.Agent rooting around my system

Status
Not open for further replies.
All done, updated and run. Even accidentally installed the stupid Yahoo toolbar, uninstalled it and went on with my life.
Thanks so much and I'll let you know if anything goes horribly wrong again.
For now, though, I think I'm heading off to sleep land. It's been far too exciting of a Saturday night.
G'nite.
 
You may try this too, after doing my above post

Please do this
(Some members say they have already tried this in a reply; but later I find it has not been done!)
The following not only resets all Internet Explorer's settings, but also removes all temp files, all extensions are disabled (toolbars, browser extensions, and Browser Helper Objects), and activeX controls are restored.


How to use Reset Internet Explorer Settings (RIES

To use RIES in Internet Explorer 7, follow these steps:

1. Click the Tools menu, and then click Internet Options.
2. On the Advanced tab, click Reset.
3. In the Reset Internet Explorer Settings dialog box, click Reset.
4. When Internet Explorer 7 finishes restoring the default settings, click Close, and then click OK two times.
5. Close Internet Explorer 7. The changes take effect the next time that you open Internet Explorer 7.

Note for users who cannot start Internet Explorer 7 for some reason, use RIES from Internet Options in Control Panel.

--------------------

And that will be the end of a longer than normal thread
Please note, submitting all 3 logs in post#1 area (ideally) would have made this thread less than half as long.

The 3 logs attachments are the number1 thing to do always in fighting Virus\Malware

Ideally post back with your thoughts on how everything is now going with your computer
In my view, it will not only be cleaner, but a lot faster at system response.
 
I went ahead and did that, although I haven't used IE in a long time. I've been using Firefox forever. It's always worked a lot better for me...except for Netflix, which hates Firefox.
And sorry about the length of the thread. I seem to remember the last time I was on here, they said to not put the logs on here until you're asked for them. Or maybe I misunderstood something. I dunno. But I'll know for next time.
Thanks!

--Mark
 
much like the person in the original posting, I also have Rootkit.agent running around my system. Malwarebytes finds the rootkit and claims that it will delete after restarting, but after 3 attempts I still have it. After reading the above postings, I downloaded and ran sophos anti-rootkit and found that it is in my windows\system32\drivers\str.sys and qtempdc.sys. When I clicked on the boxes to remove, it recommended not removing these files. I also ran Panda antirootkit, I believe I've attached the logs correctly for both malwarebytes and Panad. Your assistance is greatly appreciated in this matter.
 
Status
Not open for further replies.
Back