Stuck: Have Rootkit + Trojans: MWB wont install (stuck at RootRepeal scan): Need help with next steps

[hav_rootkit]

Hello, I have been battling a rootkit with Trojans for a few days now and am stuck. I cannot get MalwareBytes to install and have read the post on getting it to install/run, but am stuck at the point when scanning with RootRepeal and it says "MBR Rootkit Detected!" immediately when trying to scan.

Other facts: SpyBot S&D also will not install, Symantec says I have Trojan.Vundo and I am currently running the Symantec Trojan.Vundo fix in Safe Mode. HJT did install and will run, I have one log that I could post from HJT and could probably create a newer one if that helps. I have been trying to "Fix" the .dll that keeps reappearing using the HJT scan, its called "mobeteta.dll," but it just appears again when I do a new HJT scan.

I feel I need to get to the root of the problem but dont know what that is, from some other posts it seems that I will need to run ComboFix next but would like it if someone could walk me through my next steps.

I really want to save this system! Please help. Let me know what I can post to help troubleshoot.

Best Regards,

Scott

[hav_rootkit]

anyone?

[Blade81]

Hello Scott,

Download DDS and save it to your desktop from here or here or here.

Disable any script blocker, and then double click dds.scr to run the tool.

• When done, DDS will open two (2) logs:
  1. DDS.txt
     
  2. Attach.txt
     

  [*]Save both reports to your desktop. Post them back to your topic.

Download GMER here by clicking download exe -button and then saving it your desktop:

• Double-click .exe that you downloaded
  
• Click rootkit-tab and then scan.
  
• Don't check
  Show All
  box while scanning in progress!
  
• When scanning is ready, click Copy.
  
• This copies log to clipboard
  
• Post log in your reply.
  

[AdvancedSetup]

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.