Jump to content

Stuck: Have Rootkit + Trojans: MWB wont install (stuck at RootRepeal scan): Need help with next steps

Recommended Posts

Hello, I have been battling a rootkit with Trojans for a few days now and am stuck. I cannot get MalwareBytes to install and have read the post on getting it to install/run, but am stuck at the point when scanning with RootRepeal and it says "MBR Rootkit Detected!" immediately when trying to scan.

Other facts: SpyBot S&D also will not install, Symantec says I have Trojan.Vundo and I am currently running the Symantec Trojan.Vundo fix in Safe Mode. HJT did install and will run, I have one log that I could post from HJT and could probably create a newer one if that helps. I have been trying to "Fix" the .dll that keeps reappearing using the HJT scan, its called "mobeteta.dll," but it just appears again when I do a new HJT scan.

I feel I need to get to the root of the problem but dont know what that is, from some other posts it seems that I will need to run ComboFix next but would like it if someone could walk me through my next steps.

I really want to save this system! Please help. Let me know what I can post to help troubleshoot.

Best Regards,


Link to post
Share on other sites

Hello Scott,

Download DDS and save it to your desktop from here or here or here.

Disable any script blocker, and then double click dds.scr to run the tool.

  • When done, DDS will open two (2) logs:
    1. DDS.txt
    2. Attach.txt

    [*]Save both reports to your desktop. Post them back to your topic.

Download GMER here by clicking download exe -button and then saving it your desktop:

  • Double-click .exe that you downloaded
  • Click rootkit-tab and then scan.
  • Don't check
    Show All
    box while scanning in progress!
  • When scanning is ready, click Copy.
  • This copies log to clipboard
  • Post log in your reply.

Link to post
Share on other sites

  • 2 weeks later...
  • Root Admin

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.

Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.