rqwpzg.sys (Rootkit.Agent)

[hydra]

Malwarebytes has helpe me after a sneek attack with Internet Security 2010. I hit a site and Antivir went nuts, then I got the pop ups.

I still have issues with one file. I'm not sure which way to go after numerous deletions in safe mode, and it's back;)

TIA!

Malwarebytes' Anti-Malware 1.42

Database version: 3403

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18828

12/21/2009 2:46:00 PM

mbam-log-2009-12-21 (14-46-00).txt

Scan type: Quick Scan

Objects scanned: 5502

Time elapsed: 2 minute(s), 40 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\windows\system32\drivers\rqwpzg.sys (Rootkit.Agent) -> Quarantined and deleted successfully.

[noknojon]

Welcome hydra -

This shows it was deleted - (Please reboot after any infection is deleted) -

Please update and run another quick scan with Malwarebytes if you can - For any more help please read below -

As we don't work on detailed Malware removal in the general forums.

Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available

Thank you for visiting -