ntuserlitelist,SVCVMX Found but not removed after reboot

[Curson]

Hi Louis,

I think the malware is preventing TDSSKiller kernel-mode driver to launch. Let's try another tool.
Please follow the instruction in shadowwar post and attach MBAR log with your next reply.

Regards.

[Louis Lata]

Mbar log

[Curson]

Hi Louis,

The tool removed some troublesome keys.
Could you please generate a fresh FRST log ?

Regards.

[Louis Lata]

FRST Log and Addition if needed

[Curson]

Hi Louis,

The malware is still present.
A new build of MBAR should take care of it.

Please download MBAR 1.09.4.1001, then follow the instructions in shadowwar post and attach the reports with your next reply.
Please make sure to hit the "Update" button to update MBAR databases.

Regards.

[Louis Lata]

Hi im having a problem completing the scan, it freezes and stops responding also the amount of malware it has detected is extremely high.
Attached is a screen shot

[Curson]

Hi Louis,

Does the software unfreeze when waiting long enough ?
This infection drops many files, so it's not unusual for MBAR to detect such an amount of malware.

Regards.

[Louis Lata]

Hi sorry for the late reply, the longest i waited was about 2 hours and with no success of responding

[Curson]

Hi Louis,

Don't worry about the late reply, it's no big deal.
There is definitely a bug with this version of MBAR. Could you please download this one and try again ?
Please make sure to hit the "Update" button to update MBAR databases before launching the scan.

Regards.

[Louis Lata]

Hi i was able to get a full scan and cleanup overnight attached is the mbar log

[Curson]

Hi Louis,

It seems that MBAR was able to kill the rootkit.
Could you please redo a FRST scan ?

Regards.

[Louis Lata]

FRST log attached

[Curson]

Hi Louis,

The log confirms that the infection is gone. Your system is now clean.
You can remove MBAR, FRST and related files/folders.

Regards.

[Louis Lata]

Great! thanks so much, you guys are Awesome!

[Curson]

Hi Louis,

You are welcome. Thanks for the kind words.
I'm glad we were able to help you.

Regards.