Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Help with HijackThis

11 May 2011   #21

Windows 7 Ultimate 64 bit

@OakenG - thank you for that input, but autoanalysers are very unreliable and HijackThis is obsolete - it does not detect many of the modern infections being dealt with these days. BTW - I like your sig


it said the .dat file is invalid format
Do you mean that you were unable to attach the file? If so, please zip the file, post a reply with that zipped file as an attachment. Please do that before proceeding with the next set of instructions.


Your computer is infected with a TDL4 rootkit.

You have a Rootkit infection, likely from using utorrent. A rootkit is a set of software tools intended for concealing running processes, files or system data from the operating system.

You are strongly advised to do the following:

  • Disconnect the computer from the Internet and from any networked computers until it is cleaned.
  • Back up all your important data except programs. The programs can be reinstalled back from the original disc or from the Net.
  • Call all your banks, financial institutions, credit card companies and inform them that you may be a victim of identity theft and put a watch on your accounts. If you don't mind the hassle, change all your account numbers.
  • From a clean computer, change all your passwords (ISP login password, your email address(es) passwords, financial accounts, PayPal, eBay, Amazon, online groups and forums and any other online activities you carry out which require a username and password).

DO NOT change your passwords from this computer as the attacker will be able to get all the new passwords and transaction records.

Due to its rootkit functionality, your computer is very likely to have been compromised and there is no way that it can be trusted again. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be to do a reformat and reinstallation of the operating system (OS). However, if you do not have the resources to reinstall your OS and would like me to attempt to clean your machine, I will be happy to do so.

To help you understand more, please take some time to read the following articles:

What are rootkits from Wikipedia
Why are rootkits dangerous
How do I respond to a possible identity theft and how do I prevent it
When should do a reformat and reinstallation of my OS
Where to backup your files
Restoring your backups


If you decide to continue with the cleaning process, please do the following:

Run aswMBR

Click Scan

Upon completion of the scan, click the Fix button. Wait for the tool to report 'Infection fixed successfully', and reboot when prompted.

When it has rebooted, post the contents of the aswMBR.txt in your next reply.


Download and run OTL

Download OTL by Old Timer and save it to your Desktop.
  • Double click on OTL.exe to run it.
  • Under Extra Registry section, select Use SafeList.
  • Click the Scan All Users checkbox.
  • Click on Run Scan at the top left hand corner.
  • When done, two Notepad files will open.
    • OTL.txt <-- Will be opened
    • Extras.txt <-- Will be minimized
  • Please post the contents of these 2 Notepad files in your next reply.


Please post the following:
  • aswMBR.txt
  • The OTL.txt logfile
  • The Extras.txt logfile

My System SpecsSystem Spec

 Help with HijackThis

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar help and support threads
Thread Forum
I have the version of HiJackThis that has to install. I am looking for the stand alone version. If anyone know were to get this, I would appreciate the information. Thank you
Need help with HijackThis log
Hi, my computer is infected with some malware that hijacks the browser - doesn't matter which one - IE, Firefox, Chrome. It allows you to do a search in any of the search engines. But once you get your search results page, clicking on any link will trigger the malware to redirect the link to...
System Security
HijackThis Help?
I'm having problems with my browser and I'm being directed to these pages that pretend to be this Java thing. So I installed this HiJackThis program. I need help with this Log... What should I fix?
Performance & Maintenance
Understanding HijackThis
well...... here are a few HJT tutorials: HijackThis Tutorial HijackThis Tutorial - How to use HijackThis to remove Browser Hijackers & Spyware HJT Tutorial - DO NOT POST HIJACKTHIS LOGS - MajorGeeks Support Forums PC Hell: HijackThis Tutorial for Removing Spyware and this to get a direct...
System Security
When someone has the time, will you please have a look at this for me? Thank you very much! :)
System Security
Does anyone know if this works ok with win7?

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:20.

Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App