grand123 Posted November 23, 2012 ID:616281 Share Posted November 23, 2012 Hello,I recently noticed that Malwarebytes finds Rootkit.0Access and then says it was quarantined and deleted successfully. However, when I run a scan again, it shows up. I have heard that this is a very dangerous malware so I would like some help removing this. I have noticed only minor slowness recently, which may not be due to this malware and this worries me that it's a keylogger stealing my information.Below is my log.I have also attached it as a file.Malwarebytes Anti-Malware 1.65.1.1000www.malwarebytes.orgDatabase version: v2012.11.22.07Windows 7 Service Pack 1 x64 NTFSInternet Explorer 9.0.8112.16421User :: USER-PC [administrator]11/22/2012 12:20:00 PMmbam-log-2012-11-22 (12-20-00).txtScan type: Full scan (C:\|D:\|)Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUMScan options disabled: P2PObjects scanned: 353916Time elapsed: 36 minute(s), 46 second(s)Memory Processes Detected: 0(No malicious items detected)Memory Modules Detected: 0(No malicious items detected)Registry Keys Detected: 0(No malicious items detected)Registry Values Detected: 0(No malicious items detected)Registry Data Items Detected: 0(No malicious items detected)Folders Detected: 0(No malicious items detected)Files Detected: 1C:\ProgramData\Microsoft\Windows\DRM\95B7.tmp.dat (Rootkit.0Access) -> Quarantined and deleted successfully.(end)mbam-log-2012-11-22 (12-20-00).txt Link to post Share on other sites More sharing options...
Staff screen317 Posted November 23, 2012 Staff ID:616308 Share Posted November 23, 2012 Hello and welcome to Malwarebytes.We have an advanced product in development that is now in public Beta: Malwarebytes Anti-Rootkit. This tool has been designed to address the specific type of infection(s) identified on your system. At this stage Malwarebytes Anti-Rootkit has been heavily tested and we are confident in it's capabilities and stability. That being said, this is a Beta product and certain disclaimers need to be made. All Beta versions are not final products. Malwarebytes does not guarantee the absence of errors which might lead to interruption in normal computer operations or data loss. Precautions should be taken. The types of infections targeted by Malwarebytes Anti-Rootkit can be very difficult to remove. Please be sure you have any valued data backed up before proceeding, just as a precaution.While we encourage and invite participation, Malwarebytes Anti-Rootkit Beta users run the tool at their own risk. Malwarebytes bears no responsibility for issues that may arise during use of this tool, however all reasonable efforts will be made by Malwarebytes to assist in recovery should the need arise.If you agree to these terms, please let us know and we will provide a download link and instructions for you. Link to post Share on other sites More sharing options...
grand123 Posted November 23, 2012 Author ID:616372 Share Posted November 23, 2012 No offense to your great company, but I would rather not use a beta and get the problem fixed right away and not risk any issues because I want to get this rootkit removed as soon as possible.Please let me know what next steps I should take. Link to post Share on other sites More sharing options...
Staff screen317 Posted November 28, 2012 Staff ID:617839 Share Posted November 28, 2012 Hi,Sorry for the delay.Okay that is fine. Better to ask. Please update MBAM, run a Quick Scan, and post its log.Next, download DDS by sUBs and save it to your Desktop.Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply. Link to post Share on other sites More sharing options...
Staff screen317 Posted December 19, 2012 Staff ID:625037 Share Posted December 19, 2012 Are you still with us? This topic will be closed in a few days if we do not hear back from you. Link to post Share on other sites More sharing options...
Maurice Naggar Posted December 31, 2012 ID:628952 Share Posted December 31, 2012 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts