Is my system clean - Worried about rootkits

[stuartk]

Hi There

Can my system be checked? I have attached the 3 appropriate logs.

Also in the instructions the first option is to select "Healing/Quarantine and Advanced System Analysis"

However I do not see this option is AVZ so I select "Advanced System Analysis with malware removal mode enabled" - Is this correct?

Regards

[Rene-gad]

Hello

However I do not see this option is AVZ so I select "Advanced System Analysis with malware removal mode enabled" - Is this correct?

Yes

This programs can be uninstalled without any doubt:

SpywareGuard
SUPERAntiSpyware

This program too.

Malwarebytes Anti-Malware

We recommend it sometimes, but it is absolutely unnecessary to have it on your system permanent.

Switch off/Disable:
- Antivirus and and, if you have - Firewall.
- System Restore

- Execute following script

begin
ClearQuarantine;
 QuarantineFile('F:\autorun.inf','');
 QuarantineFile('H:\autorun.inf','');
CreateQurantineArchive('C:\quarantine.zip');
SetAVZPMStatus(True);
RebootWindows(true);
end.

After reboot:
- Upload the C:\quarantine.zip over the link Upload quarantined files on the top of this page.
- Make new logs: virusinfo_syscheck and hijackthis and attach them to your new post.

[stuartk]

Hi There

Is it necessary to remove:

SuperAntiSpyware
SpywareGuard

Both these programs are recommended for IE / FireFox protection by malware removal forums.

As for malware bytes - It's going to be a pain install it and then uninstalling it.

Regards

[Rene-gad]

Is it necessary to remove:
SuperAntiSpyware
SpywareGuard

It's NOT necessary to have them installed, they bring NOTHING.

Both these programs are recommended for IE / FireFox protection by malware removal forums.

no comment

As for malware bytes - It's going to be a pain install it and then uninstalling it.

This program could be recommended in determined situations but in each case - without running in autostart.

PS: either your trust in your physician or you've to search another one for you...

[stuartk]

Hi There

OK removed:

SpywareBlaster
SpywareGuard

Disabled MBAM from Autostart

New logs attached

Regards

Upload resultFile saved as
091130_200214_quarantine_4b13fa96786eb.zip
File size 4022
MD5 354b0ee8a9ce20dc0d27ecee1cbc8277

File uploaded, thank you!

[Rene-gad]

Was it really so difficult for you, to upload the quarantine as requested?
The logs seems to be clean. Results of file analysis will be ready later. If it would be found any malicious item - we'll make a script for you. If not - have a nice day.

[stuartk]

Hi There

No I just couldn't find the upload quarantine link.

Thanks for your time.

Regards

[Rene-gad]

The uploaded files are OK.