RootKit Revealer

[Adam_Q]

I've been getting loads of spyware on my fooking computer and been advised by Alex to run Hijack this and RootKit Revealer

I've run the rootkit thingy, which brought up loads of stuff... but dont know what to do with it....

Can anyone help?

[Alex]

post it up, some stuff will come up that is ok tho.

[Adam_Q]

Just scanning again

[Adam_Q]

Could only take screen shots so its in two parts

http://i167.photobucket.com/albums/u145/adz21/screenshot010208-1.jpg
http://i167.photobucket.com/albums/u145/adz21/screenshotsecondpart010208.jpg

[Alex]

The only one that looks suspicious to me is, "uduuiig.exe" and it's other files.
It does help if you close things such as firefox tho, will give less results.

[Adam_Q]

The only one that looks suspicious to me is, "uduuiig.exe" and it's other files.
It does help if you close things such as firefox tho, will give less results.

Oh ok... will run it again and try to close as much as possible :)

But how do I remove the suspicious files? Would I need to find the source and remove it that way?

[Alex]

See if you can modify them in safe mode, just try renaming the exe file first incase it's required.
Or hook your HD up to another PC and modify.

[Adam_Q]

See if you can modify them in safe mode, just try renaming the exe file first incase it's required.
Or hook your HD up to another PC and modify.

Not something I feel comfortable about doing..... dont suppose you wanna come give it a go somewhen? :y:

[Alex]

after abit of digging around it looks like your infected with MessengerSkinner, Some crappy malware that hides itself with a rootkit.

Your a bit far for me to come (Would have to charge) but give this ago to, ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe

It should give you the option to remove those files.

[Adam_Q]

after abit of digging around it looks like your infected with MessengerSkinner, Some crappy malware that hides itself with a rootkit.

Your a bit far for me to come (Would have to charge) but give this ago to, ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe

It should give you the option to remove those files.

ok bud. I'm running f-secure now. So will that find any mailware and spyware? then remove it?

[Alex]

Hopefully, Iv'e never used it but it did say on there site it has a removal engine.

[Adam_Q]

Its scanning now, but does have a cleaning process after... so hopefully that fixes it :)

Thanks for your help dude!

[Adam_Q]

F-secure didn't actually find any hidden files... will run it again though :)