@OakenG - thank you for that input, but autoanalysers are very unreliable and HijackThis is obsolete - it does not detect many of the modern infections being dealt with these days. BTW - I like your sig :)

========================================

@tdsmith
it said the .dat file is invalid format
Do you mean that you were unable to attach the file? If so, please zip the file, post a reply with that zipped file as an attachment. Please do that before proceeding with the next set of instructions.

========================================

Your computer is infected with a TDL4 rootkit.

You have a Rootkit infection, likely from using utorrent. A rootkit is a set of software tools intended for concealing running processes, files or system data from the operating system.

You are strongly advised to do the following:


  • Disconnect the computer from the Internet and from any networked computers until it is cleaned.
  • Back up all your important data except programs. The programs can be reinstalled back from the original disc or from the Net.
  • Call all your banks, financial institutions, credit card companies and inform them that you may be a victim of identity theft and put a watch on your accounts. If you don't mind the hassle, change all your account numbers.
  • From a clean computer, change all your passwords (ISP login password, your email address(es) passwords, financial accounts, PayPal, eBay, Amazon, online groups and forums and any other online activities you carry out which require a username and password).



DO NOT change your passwords from this computer as the attacker will be able to get all the new passwords and transaction records.

Due to its rootkit functionality, your computer is very likely to have been compromised and there is no way that it can be trusted again. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be to do a reformat and reinstallation of the operating system (OS). However, if you do not have the resources to reinstall your OS and would like me to attempt to clean your machine, I will be happy to do so.

To help you understand more, please take some time to read the following articles:

What are rootkits from Wikipedia
Why are rootkits dangerous
How do I respond to a possible identity theft and how do I prevent it
When should do a reformat and reinstallation of my OS
Where to backup your files
Restoring your backups

========================================

If you decide to continue with the cleaning process, please do the following:

Run aswMBR

Click Scan

Upon completion of the scan, click the Fix button. Wait for the tool to report 'Infection fixed successfully', and reboot when prompted.




When it has rebooted, post the contents of the aswMBR.txt in your next reply.

========================================

Download and run OTL

Download OTL by Old Timer and save it to your Desktop.

  • Double click on OTL.exe to run it.
  • Under Extra Registry section, select Use SafeList.
  • Click the Scan All Users checkbox.
  • Click on Run Scan at the top left hand corner.
  • When done, two Notepad files will open.
    • OTL.txt <-- Will be opened
    • Extras.txt <-- Will be minimized

  • Please post the contents of these 2 Notepad files in your next reply.



========================================

Please post the following:

  • aswMBR.txt
  • The OTL.txt logfile
  • The Extras.txt logfile