Author Topic: possible rootkit infection  (Read 6326 times)

0 Members and 1 Guest are viewing this topic.

October 19, 2014, 12:25:13 pm

richo

  • Guest
possible rootkit infection
« on: October 19, 2014, 12:25:13 pm »
Hi everyone
I have being having problems for some time and have used malwarebytes to clean a couple trojans I had that I didn't scan properly from my old hard drive. I was still having mbam, superantispyware, roguekiller and maybe 1 or 2 other cleaning tools, but bsod when running in normal mode or updating definitions or even scanning for results.
So eventually I had enough and took it to a computer shop to supposedly get fixed with them using combofix. after going back there again because of still bsod with antivirus or cleaning tools here I am. convinced I have an infection still.
recently I have seen my megabytes being used when I wasn't using an bandwith because only 2 pages were loaded and no flash players or the like were playing. so there has to be a reason.

roguekiller and tdss killer come back saying they have some some suspicious but Im not too sure on what to clean and how so if anyone could help that would be great. I do have a bit of trouble getting online a bit , not to sure if it's because Im in a reginal area but sometimes I have good service in bars but cant get online or become disconneted it's frustrating.
 thanks for any help

Reply #1October 20, 2014, 11:36:08 am

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 855
  • Reputation:
    91
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: possible rootkit infection
« Reply #1 on: October 20, 2014, 11:36:08 am »
Hello
Can you please post the reports of cleaning tools you have done so far?
(RogueKiller, Gmer, tdsskiller)

Reply #2October 21, 2014, 03:34:51 am

richo

  • Guest
Re: possible rootkit infection
« Reply #2 on: October 21, 2014, 03:34:51 am »
having problems staying online there probably dis connecting me

Reply #3October 21, 2014, 05:19:33 am

richo

  • Guest
Re: possible rootkit infection
« Reply #3 on: October 21, 2014, 05:19:33 am »
it wont let me upload a txt file for gmer

Reply #4October 21, 2014, 05:23:41 am

richo

  • Guest
Re: possible rootkit infection
« Reply #4 on: October 21, 2014, 05:23:41 am »
gmer

Reply #5October 21, 2014, 07:59:11 am

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 855
  • Reputation:
    91
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: possible rootkit infection
« Reply #5 on: October 21, 2014, 07:59:11 am »
Tdsskiller only shows legit file (antimalware definitions)
Your DNS are pointing in UK, which seems legit.

What are the symtoms? Still seeing bandwidth usage?
You can see who is using it with the performance monitor of windows

Reply #6October 21, 2014, 11:36:41 am

richo

  • Guest
Re: possible rootkit infection
« Reply #6 on: October 21, 2014, 11:36:41 am »
the Dns you say point to the UK, but Im in Australia.
Is a forged file anything to worry about?
sometimes a bit laggy in offline games.
I have a new video card and drivers.
getting dis-connected alot and have 3-4 bars out of 5 for reception and cant get back online unless a rebooting.

what about roguekiller list alot there and something about ?(iao hooks) or similar name cant load the page.

Reply #7October 21, 2014, 03:10:26 pm

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 855
  • Reputation:
    91
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: possible rootkit infection
« Reply #7 on: October 21, 2014, 03:10:26 pm »
Quote
Is a forged file anything to worry about?
No, because here it's a def file from Microsoft antimalware.

Quote
getting dis-connected alot and have 3-4 bars out of 5 for reception and cant get back online unless a rebooting.
This is more a hardware issue, malware are not able to do that :)


Reply #8October 22, 2014, 03:04:39 am

richo

  • Guest
Re: possible rootkit infection
« Reply #8 on: October 22, 2014, 03:04:39 am »
ok thanks sounds about right
Im thinking it could be related to my usb input location
any advice you can give about ways to try and find out how and what is causing the problem?
thanks again.

Reply #9October 22, 2014, 11:05:20 am

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 855
  • Reputation:
    91
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: possible rootkit infection
« Reply #9 on: October 22, 2014, 11:05:20 am »
networking is tricky to diagnose. Change wifi device if you can, or/and move closer from the box

Reply #10October 25, 2014, 01:44:42 am

richo

  • Guest
Re: possible rootkit infection
« Reply #10 on: October 25, 2014, 01:44:42 am »
ok thanks for your help
I cant get online now with my usb stick, using a friends computer to just get online.
might query telstra as in options telstra something it wont let me select it and comes up as an error.
Thanks for your help Tigzy

Reply #11October 28, 2014, 12:21:51 pm

richo

  • Guest
Re: possible rootkit infection
« Reply #11 on: October 28, 2014, 12:21:51 pm »
Im now thinking it my harddrive
as scan sfc and disk errors are now scanned and fixed but western digital tool cant repair bad sectors , so look like Im up for a new harddrive
thanks for your help