Hi, I have a computer at work that was had a memory process (system\svchost.exe) infected with this backdoor.bot according to the MWBAM log. Removed it with RWBAM but it keeps coming back a day or so later. I've run a full scan of the system with my antivirus (Avira) and ran MWBAM and now everything is coming back as clean...but I've done this the past few days and the backdoor.bot comes back each time. I know I need to post log files and install Defogger, DDS, and the GMER Rootkit scanner, but should I do it now or wait until it gets infected again? Don't want to waste anyone's time. Thank you for any help!
