Avast free found 20 Rootkit Hidden Files, can't delete them - Help! What to do?

Viruses and worms
1

Hello

I would really appreciate some help from someone who knows about these viruses…

I have a Asus Notebook X102B, and installed Avast Free. When I ran a full scan it found 20 Rootkit Hidden Files - all in different locations in C:\Windows\WinSxS.…

I tried to delete them with Avast as advised, but get the Error message: ‘Access is denied’.

Are the Rootkit files are still on my laptop? Are they dangerous? How do I get rid of them? I don’t know whether it’s safe to use my laptop.

Help! Please…

2

try a reboot and scan again … still detected?

3

Hello,

I took your advice… the Full Scan is only 12% through, and already it has now found 215 infected files! Before it was 20.

Please advise… this seems very serious and scary to me!

Thank you

4

Perform a bootscan.

5

i would wait and let essexboy have a look first…

he is notified

6

Could you take a screenshot of the virus chest showing the infected files

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Select additions at the bottom
[*]Press Scan button.

https://dl.dropboxusercontent.com/u/73555776/frst.JPG

[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please attach both logs generated.

7

Hello,
Here are the screenshots…
Is it safe to delete all these files by rebooting the laptop?
When I try @move to chest’ - I get the Error message: ‘Request is not supported (50)’
So, only option is Delete.

8

Have you just updated windows ?

If so reboot and the alerts should disappear

9

Here’s the results from the Farbar scan - what do they mean?
FRST Notepad + Additions

10

They are diagnostic logs and will show stuff that should not be there …

11

Do the logs show I have a problem?
Do I really have 215 (and multiplying?) Rootkit hidden files?
What should I do next?
Should I reboot the laptop, or will Avast permanently delete important files my computer needs?

Sorry to ask so many questions, but I need advice as to the right thing to do…

12

This has happend before … avast reporting infection in that folder just after a windows update
Follow essexboys instructions … he will be back … relax and be patient

13

Have you just updated windows ?

If so reboot and the alerts should disappear

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

C:\ProgramData\SetStretch.exe C:\ProgramData\SetStretch.VBS C:\ProgramData\uninstall1961562.exe

CMD: bitsadmin /reset /allusers
CMD: DEL %TEMP%*.* /F /S /Q
CMD: RD /S /Q %TEMP%
REBOOT:

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

14

Hello,
Here’s the Fix Log - hope all is ok now.
Thank you very much for your help.

15

Essexboy asked you a question twice … still no answer!

16

Could you confirm you are no longer getting the alerts