julianbury
New member
Does anyone out there know of a way to scrub a root kit off my hard drive?
My Computer
At a glance
Windows 7 64bit
- OS
- Windows 7 64bit
I think there's a rootkit on my win7 PC
- Thread starter julianbury
- Start date
- Local time
- 8:56 AM
- Messages
- 12,011
Go to Malwarebytes.org and download their rootkit tool.
My Computer
At a glance
Windows 7 Home Premium SP1, 64-bitIntel Skylake i5-6600K, not overclocked8 GB HyperX DDR4-2666 (2 x 4 GB)none; graphics are integrated on CPU
- Computer type
- PC/Desktop
- Computer Manufacturer/Model Number
- Ignatz Special; 4 speed manual gearbox; factory air conditioning; one of one
- OS
- Windows 7 Home Premium SP1, 64-bit
- CPU
- Intel Skylake i5-6600K, not overclocked
- Motherboard
- AsRock Z170M Extreme 4, micro ATX
- Memory
- 8 GB HyperX DDR4-2666 (2 x 4 GB)
- Graphics Card(s)
- none; graphics are integrated on CPU
- Sound Card
- onboard: Realtek ALC1150; external: USB Behringer UF0-202
- Monitor(s) Displays
- Dell S2340M 23 inch IPS
- Screen Resolution
- 1600 x 900
- Hard Drives
- System: Crucial MX100 series SSD, 128 GB;
Data: Samsung Spinpoint 103SJ, 1 TB;
Backup: WD Caviar Green WD30EZRX-00D8PB0, 3 TB
- PSU
- Rosewill SilentNight 500 watt fanless, semi-modular
- Case
- Antec Solo II
- Cooling
- Noctua NH-U12S; Noctua F12 intake, Noctua S12A exhaust
- Keyboard
- Microsoft 200 6JH-00001 USB
- Mouse
- Dell or Microsoft optical wired; USB
- Antivirus
- Microsoft Security Essentials and Malwarebytes Premium
- Browser
- Pale Moon
- Other Info
- All fans PWM; speeds at idle: CPU circa 500 rpm; intake circa 600 rpm; exhaust circa 600 rpm; CPU temps 27 idle and 47 C load in a warm room (27 C/81 F) when running Intel Extreme Tuning Utility stress test.
download Malwarebytes Anti-Rootkit from here
- Unzip the contents to a folder in a convenient location.
- Open the folder where the contents were unzipped and run mbar.exe
- Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
- Click on the Cleanup button to remove any threats and reboot if prompted to do so.
- Wait while the system shuts down and the cleanup process is performed.
- Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
- When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt
My Computer
At a glance
Windows 7 Home Premium 64BitAMD A6-3420M 1.5GHZ OC - 2.0GHZ4GB DDR3 1600MHZAMD RADEON 6520G+AMD RADEON HD7470M 1GB DDR3
- Computer type
- Laptop
- Computer Manufacturer/Model Number
- Packard Bell
- OS
- Windows 7 Home Premium 64Bit
- CPU
- AMD A6-3420M 1.5GHZ OC - 2.0GHZ
- Memory
- 4GB DDR3 1600MHZ
- Graphics Card(s)
- AMD RADEON 6520G+AMD RADEON HD7470M 1GB DDR3
- Screen Resolution
- 1366x768
- Hard Drives
- 500GB SATA
- Internet Speed
- 18Mb Unlimited
- Antivirus
- AVAST!
- Browser
- MOZILLA FIREFOX
Any of these are good Best Free Rootkit Scanner and Remover
and you might like to try this as it runs from boot
Download Kaspersky Rescue Disk 10 < takes a while but will avoid using the OS and runs from power up.
and you might like to try this as it runs from boot
Download Kaspersky Rescue Disk 10 < takes a while but will avoid using the OS and runs from power up.
My Computer
At a glance
Desk1 7 Home Prem / Desk2 10 Pro / Main lap A...Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i...Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop...Desk 1& 2NVidia GTX 650 & Laptops on board Intel
- Computer type
- PC/Desktop
- Computer Manufacturer/Model Number
- Own build (new) Desk1 / Asus ROG Win 7 / Desk2 1st build
- OS
- Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
- CPU
- Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i5 2500
- Motherboard
- Desk1 Asus P877-V / Desk2 Gigabyte H67 UD3H / Laptop ?
- Memory
- Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop 8Gb DDR3
- Graphics Card(s)
- Desk 1& 2NVidia GTX 650 & Laptops on board Intel
- Sound Card
- Desk 1 & 2 -XONAR DG Realtek High Def audio Laptop
- Monitor(s) Displays
- Desk 1 Benq HD 2450 / Desk2 Philips 24" / Laptop 17.5"
- Screen Resolution
- 1920x1080 D1 & D2 & Laptop 1
- Hard Drives
- Desk1 Samsung 120GB 830 SSD
Asus ROG 256GB 850 Pro SSD
Desk2 Samsung 840 256 SSD
Toshiba 120GB EVO
- PSU
- Desk 1 Corsair HX 1050/ Laptop ? / Desk 2 Corsair HX 650
- Case
- Desk 1 Cooler HAF XM ? Toshiba laptop / Desk2 Coolermaster
- Cooling
- Fans on all Desk1 -2 Desk2 - all Coolermasters 5 Laptop ?
- Keyboard
- Desk 1 MS Sidewinder X6 Desk 2 MS Sidewinder X 4
- Mouse
- Desk 1&2 - Gigabyte MS 900 gamer - laptop - Logitec wireless
- Internet Speed
- ADSL2+
- Other Info
- One other Desktop (tester) and spare Toshba laptop both with SSD's
Running Kaspersky 2016 ISS on all machines config'd identically
Logitec audio stereo systems on each machine (x3)
Canon MG5250MFC
Router/modem TP-Link running WPA2SK
julianbury,
:info: Please use the following diagnostic tool. It has a powerful detection mechanism, and may help us get to the root of your issues:
:info: Please use the Farbar Recovery Scan Tool.
Download: Farbar Recovery Scan Tool Download
Select the version that applies to your system.
Save it to your Desktop.
Double-click the downloaded file to run it.
When the tool opens click Yes to the disclaimer.
At the program's console, press the Scan button.
When done, the tool produces a log, FRST.txt, in the same directory from which the tool is run (Desktop).
:ar: Please provide the FRST.txt in your reply.
The first time the tool is run, it also makes another log: Addition.txt
:ar: Also post the Addition.txt in your reply.
:info: Please use the following diagnostic tool. It has a powerful detection mechanism, and may help us get to the root of your issues:
:info: Please use the Farbar Recovery Scan Tool.
Download: Farbar Recovery Scan Tool Download
Select the version that applies to your system.
Save it to your Desktop.
Double-click the downloaded file to run it.
When the tool opens click Yes to the disclaimer.
At the program's console, press the Scan button.
When done, the tool produces a log, FRST.txt, in the same directory from which the tool is run (Desktop).
:ar: Please provide the FRST.txt in your reply.
The first time the tool is run, it also makes another log: Addition.txt
:ar: Also post the Addition.txt in your reply.
My Computer
At a glance
Windows 7 Home Premium
- Computer type
- PC/Desktop
- Computer Manufacturer/Model Number
- An ol' eMachines
- OS
- Windows 7 Home Premium
- Internet Speed
- Fine for me...I'm retired!
Julian have you run any of those rootkit scans or that Kaspersky one I linked yet?
My Computer
At a glance
Desk1 7 Home Prem / Desk2 10 Pro / Main lap A...Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i...Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop...Desk 1& 2NVidia GTX 650 & Laptops on board Intel
- Computer type
- PC/Desktop
- Computer Manufacturer/Model Number
- Own build (new) Desk1 / Asus ROG Win 7 / Desk2 1st build
- OS
- Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
- CPU
- Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i5 2500
- Motherboard
- Desk1 Asus P877-V / Desk2 Gigabyte H67 UD3H / Laptop ?
- Memory
- Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop 8Gb DDR3
- Graphics Card(s)
- Desk 1& 2NVidia GTX 650 & Laptops on board Intel
- Sound Card
- Desk 1 & 2 -XONAR DG Realtek High Def audio Laptop
- Monitor(s) Displays
- Desk 1 Benq HD 2450 / Desk2 Philips 24" / Laptop 17.5"
- Screen Resolution
- 1920x1080 D1 & D2 & Laptop 1
- Hard Drives
- Desk1 Samsung 120GB 830 SSD
Asus ROG 256GB 850 Pro SSD
Desk2 Samsung 840 256 SSD
Toshiba 120GB EVO
- PSU
- Desk 1 Corsair HX 1050/ Laptop ? / Desk 2 Corsair HX 650
- Case
- Desk 1 Cooler HAF XM ? Toshiba laptop / Desk2 Coolermaster
- Cooling
- Fans on all Desk1 -2 Desk2 - all Coolermasters 5 Laptop ?
- Keyboard
- Desk 1 MS Sidewinder X6 Desk 2 MS Sidewinder X 4
- Mouse
- Desk 1&2 - Gigabyte MS 900 gamer - laptop - Logitec wireless
- Internet Speed
- ADSL2+
- Other Info
- One other Desktop (tester) and spare Toshba laptop both with SSD's
Running Kaspersky 2016 ISS on all machines config'd identically
Logitec audio stereo systems on each machine (x3)
Canon MG5250MFC
Router/modem TP-Link running WPA2SK
FYI. Malwarebytes v2 includes their rootkit scan.
My Computer
At a glance
Microsoft Windows 7 Home Premium 64-bit Servi...Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz8 GB DDR3Intel(R) HD Graphics
- Computer type
- Laptop
- Computer Manufacturer/Model Number
- Hewlett-Packard/G62-107SA Notebook
- OS
- Microsoft Windows 7 Home Premium 64-bit Service Pack 1
- CPU
- Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
- Motherboard
- Hewlett-Packard 1425
- Memory
- 8 GB DDR3
- Graphics Card(s)
- Intel(R) HD Graphics
- Sound Card
- Realtek High Definition Audio
- Monitor(s) Displays
- Builtin
- Screen Resolution
- 1366 x 768 x 32 bits (4294967296 colors) @ 60 Hz
- Hard Drives
- 250 GB SATA Hard Disk Drive 7200 rpm
2TB Seagate GoFlex USB 2 Drive
1TB Iomega Prestige USB 2 Drive
1.5TB Iomega Prestige USB 2 Drive (Samsung)
2TB WD MyBook Live NAS.
- Mouse
- Logitech Anywhere MX
- Internet Speed
- 152 Mbs download 10 Mbs upload
- Antivirus
- Norton 360
- Browser
- Chrome
Similar threads
