Rootkit Agent

[01aford]

I realized that I posted this in the wrong place

I'm getting on my XP:

windows\system32\drivers\iqhelh.sys (Rootkit.Agent) Delete on reboot

windows\system32\drivers\tdeigq.sys (Rootkit.Agent) Delete on reboot

When I reboot they come back.

This stuff has stopped my internet making me have to use another computer to talk to you.

[Maniac]

Hello 01aford! Welcome to MalwareBytes' Anti-Malware Forums!

My name is Borislav and I will be glad to help you solve your problems with malware. Before we begin, please note the following:

• The process of cleaning your system may take some time, so please be patient.
  
• Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  
• Instructions that I give are for your system only!
  
• If you don't know or can't understand something please ask.
  
• Do not install or uninstall any software or hardware, while work on.
  

Please follow these instructions:

http://forums.malwarebytes.org/index.php?showtopic=9573

Post all logs if you can.

[01aford]

Thanks for your help.

My computer is so slow it's taking for ever to load up the page 1/2 hour.

I'm on another computer now.

Can I put this stuff on a memery stick and download onto the infected system?

[Maniac]

Yes, you can.

[01aford]

I forgot to say that it has the updated Avira and Malwarebytes.

Malwarebytes picked up the issue

[Maniac]

Do you still need help?

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!