GMER - Dumb or infected

[glennc]

Hello,
I have a question for you Gentlemen. This morning I downloaded GMER, and went to run it and got what looked like a windows error message. Am I doing something wrong or am I compromised. Thanks very much for any help. I have run SAS and MAMB. Haven't run anything in safe mode yet.
glennc

 

[Tews]

Glenn, can you post a snip of the error message??

 

[glennc]

Hello Tews,
Below is the error message. This is on W& Ultimate 64 bit.
Thanks a lot for any help!



glennc

 

[Tews]

Looks like a bad install..

 

[Nigsy]

GMER runs on Windows NT/W2K/XP/VISTA

Might not also support a 64bit environment.

 

[glennc]

Thank you Gentlemen for your time and help. I've tried to install it 5 times, even changing the name before extracting to something completely off the wall, and I get that message. You may be right about it not liking 64 bit. I got the feeling that this program was like a real dig deep and find everything kind of program, like computer wise people would use. I may be wrong. Are there any really strong antimalware, rootkit, spyware programs or are they all seperate? Thanks again.
glennc

 

[Anak]

GMER runs on Windows NT/W2K/XP/VISTA

Might not also support a 64bit environment.

That is correct, it does not support X64.

Glenn, are you having problems or did you just want to confirm that your machine wasn't infected?

 

[glennc]

Hello Anak,
I don't believe I have a specific problem. It was just when GMER wouldn't install, I thought it might be blocked. Now that I know it doesn't run on 64 bit I am at ease.
Thanks for all who participated.
glennc

 

[Dwarf]

OK. I have downloaded it to my Windows 7 64-bit installation. I get the same message when I try to run it. What you need to do is the following:

Click OK (1) on the error message. Next, click Scan (2). Another error message appears. Click on OK (3) on this message. Your system will now be scanned (4).

 

[glennc]

Cheers Dwarf,
I didn't mean for anyone to go to that much trouble, so thanks for the assist. Have you used the program before, is it worth the install. Sure looks a little intimidating.
Might give it a try, the main point that some malware wasn't blocking it's install is what had me mostly concerned.
glennc

 

[Anak]

I have to check, but I saw where Dwarf's solution was possible, but users were not sure whether or not Gmer was doing a proper scan...

I may have to use a Wilders Security forum link to elaborate.

This would only be the gateway Glenn.........
Wilders Security Forums - Powered by vBulletin

 

[glennc]

Thanks Anak,
All help is appreciated and I'll look into that site. Appreciate your time and concern.
glennc

 

[Anak]

Not a problem...Like Red Green says, Hey! I'll be lookin' out for ya' we're all in this together...

There is one other anti-root-kit called Sophos anti-root-kit that is x64 compatible and is more user friendly, but it isn't as good as the x32 Gmer.
Anti-Rootkit | Free Rootkit Removal | Rootkit Detection - Sophos

I hesitate to make suggestions because of different user preferences.

If you may allow me to rant a little....

The situation in a nutshell revolves 'round any program catching up to the new? x64 platform.
Come on, x64 been 'round for users like us for ten years now. What's the big deal?

The deal is the software companies waiting until x64 catches on fire.
Waiting, for what? Businesses that are laden with XP systems to find enough capital to make the switch?

To me that is a poor excuse! That's like saying the dog ate my homework.
It's all rubbish.

For the businesses it all boils down to the Almighty Bottom Line, and users like you and me wait for scraps.

Instead of everyone being concerned about Moore's Law, and watching PC's, and OS's increase in power;

I would like to see a Law created that:

For anyone that feels the need to create and/or send malevolent programming over any network. May you, and anything associated with you. Burn in Hell.
Anak 1951- 20??

Thanks Glenn I feel better now. I'll just grab my soapbox an go stand in the corner until I'm needed again.........


Anak

 

[glennc]

Howdy Anak,
I too found myself beset with problems getting W7 64 bit to run. It seriously took weeks and 5 reinstalls. The problem was (x86) 64 bit compatible programs. I would like to take advantage of the speed of a 64 bit program. Very few I've found. All my old favorites dumped on me. It is to a point where I practically do a System Image before any new program install. Restore Points failed me the two times I've needed them.
As to my issue I use Sophos Anti-Rootkit but it as explained to me is very sensitive and gives items that don't exist, at least is recommends you don't erase them. But I'm constantly getting "hidden" copies of stored program installers that I have in my Download Section. I look and there are no hidden copies of those files. With the other software I am as safe I think as I'm gonna be. What is everyone doing about that Flash/Microsoft critical hole? Thanks Kind Sir.
glenn

 

[Anak]

Howdy Anak, I too found myself beset with problems getting W7 64 bit to run. It seriously took weeks and 5 reinstalls.

And a big howdy back atcha', Glennc !

Then I Don't feel as bad, I've only had to do one re-install.
Have you tried the compatibility feature when installing?

All my old favorites dumped on me.

I know the feeling, it's like x64 is the new girlfriend, and won't allow any of the old ones to come around anymore.

I have two System Images so far, well four actually, the one that’s on the HDD, one separate of the HDD but still includes the bloatware, and two after I've cleaned out the Cr*p.

Restore points (I like to call it the wayback machine) can be pretty specific for going back to an earlier time.
I look at it like this:
You have to be aware of any changes instantly, which is easy to do because we are all picky about our PC's
Let's say your machine is running okay, just the way you like it, when something disturbs the system settings. Then it's handy to go back.
If you don't like a program or if it isn't running okay, and you use the wayback machine, it is a givn' that your PC won't be going back to the way it was. Close, but no cigar.

One feature I like now in win7 is it will give a readout of the changes it will make.
I use that feature to determine if it is worth it or not to go back.

As to my issue I use Sophos Anti-Rootkit but it as explained to me is very sensitive and gives items that don't exist, at least is recommends you don't erase them. But I'm constantly getting "hidden" copies of stored program installers that I have in my Download Section. I look and there are no hidden copies of those files. With the other software I am as safe I think as I'm gonna be. What is everyone doing about that Flash/Microsoft critical hole? Thanks Kind Sir.
glenn

Have you tried going to _ Control Panel\All Control Panel Items _
To see Hidden files and Folders:
Click on Folder View, when the folder options box appears,

• Click on View
• Go to Hidden files and Folders
• Tick the _ Show Hidden files and Folders _ Radio button.
• Click Apply.

Then down three entries:

• Un-tick the _ Hide protected system operating files (Recommended)
• Click Apply
• Okay your way out.

Now you should be able to see those files, they may even appear on your desktop.
In order to stop them from appearing on the desktop you have to go back into Folder Options and re-tick the _ Hide protected system operating files (Recommended) box.
You can leave the _ Show Hidden files and Folders _ Radio button, applied with no harm.

What is everyone doing about that Flash/Microsoft critical hole?

For now, make sure you have the latest Adobe Flash Player 10.1.82.76 , and be careful where it's used (Easier said than done, Huh!) or just disable it.

There is supposed to be updates on the way .

We are in the process of finalizing a fix for the issue and expect to provide an update for Adobe Flash Player for Windows, Macintosh, Linux, Solaris, and Android operating systems during the week of September 27, 2010. We expect to provide updates for Adobe Reader 9.3.4 for Windows, Macintosh and UNIX, and Adobe Acrobat 9.3.4 for Windows and Macintosh during the week of October 4, 2010.

Adobe - Security Advisories: APSA10-03 - Security Advisory for Flash Player

Keep an eye on the News - Windows 7 Forums Our guys and gals or is it gals and guys? are the best in having the latest news.

Thanks Kind Sir.
glenn

You are most welcome, Glenn........Steve

 

[glennc]

Hey Steve,
Yes I did. It just turned out that there were incompatibilities with many of the initial programs I used to use. Commodo Firewall - killed internet connection, Zonealarm - faulted my USB and hardrives, Emmisoft - with the Explorer integration allowed, killed the manage button and the backup button on Windows backup and explorer. Of course it took quite a while and restore points, and clean startup and reinstalls to figure it out. Microsoft Backup with System Image went to backup drive, when I started with the Repair Disk I dutifully made, the drive letters switched themselves around so it couldn't find the backup with System Image. Windows program uninstaller in my personal opinion leaves a lot of junk, so I tried Revo, but revo free is only for 32 bit programs and it doesn't show 64 bit programs. I/O Uninstaller lets you search and locate the file to delete but it leave junk. I spent a week trying to clean SuperAntispyware 84 Bit off my computer untill I found Revo Pro Trial for 64 Bit, worked like a charm. If I hadn't built this box for use with W7, I would have dumped W7. Now I am confident that a Macrium System Image before a change will get me back to a safe place, finally.
Yes in reference to the hidden files I did have them displayed when I went looking for them. They were not in the specified folder, but the original none hidden version was there??????????
I've disabled Flashplayer latest version and Adobe Reader extension on FF 3.6.9. I enable them only for a something I need to view, then disable them again. Hope that works.
As a semi-question, I like and use CCleaner for light cleanup, afraid of deep cleanups. Since it is a 32 bit program, I read somewhere that it will only clean up 32 bit stuff. Do happen to know if that is true?
Thanks again to you and the other very helpful members of this forum.
glennc

 

[Anak]

Hi! Glenner, I have a cousin by your name, and that's what we call him. If you mind let me know.....

I'm going to start from the bottom, and work my way up.....

If you go here; CCleaner - Optimization and Cleaning - Free Download It is the latest version _ Version 2.35.1223 _ And it is x64 compatible.
CC 3.0 is due to come out, and it will have native x64 support.

I've disabled Flashplayer latest version and Adobe Reader extension on FF 3.6.9. I enable them only for a something I need to view, then disable them again. Hope that works.

It should. Though, you have to put up with all the naggin' to turn 'em back on.

Yes in reference to the hidden files I did have them displayed when I went looking for them. They were not in the specified folder, but the original none hidden version was there??????????

I'm going to have to work on this one, you'll hear from me.


Glenn, I'm pretty tired, and I am going to have to sign off for now. I've been working outside all day, and it is becoming hard for me to concentrate.

I have your post in QUOTE's, and I'll finish answering, but it may be tomorrow.

You take care, and have a great evening.....Steve

 

[glennc]

Yo Steve,
Glenner is fine, your the second person that used it. Thanks for the answers and investigations. Please take your time, be careful working tomorrow. Take it easy!
glennc

 

[Anak]

Glenn we're getting off topic here so I'm going to go back to: http://www.sevenforums.com/performance-maintenance/97531-window-7-backup-failing.html

Unless you want to start a new topic, I'll wait for your answer before I do anything......

 

[glennc]

Hello Steve,
Actually we've covered the original question fully I believe with your and the other members help, as you've noted. So for now I think we are done. Thanks again for all the assistance and information.
I'll be back, unfortunately........
glennc