Found a rootkit on this computer help please

Viruses and worms
1

Hi the person that owns this computer was complaining to me a few days ago on how slow this computer was going So i did a scan with avast free lasted version and malwarebytes free and nothing did come up a couple days ago though so that was ok. Today though the person that has this computer complained to me that his computer was slow and that it was taking forever to download a program and websites were slow to open in Internet Explorer 11 For Windows 7 home premium.

So i decided to do a full scan with avast free to check and see if their was anything at all like a virus and sure enough avast came up with a rootkit. Avast did say that it did delete the rootkit successfully but i would just like some one to double check to make sure the rootkit is gone from this computer and make sure that their is no other threats on this computer also.

Threat name is; win32;Rootkit -gen
Action; deleted
location of threat found:
c;\users\Gary\Downloads\Dropbox 1.4.20.exe
Severity High
here are the malwarebytes, log and the otl log below;

Thanks avast team

2

Diddym

Really? Run aswMBR. THEN takethe dropbox file and upload it to virustotal post that link.

3

Micheal avast free has deleted the infected file so I can not upload it virus total.

Thanks Micheal

4

HI micheal I am doing a quick scan with aswmbr right now the following computer I hope a quickscan will satisfy you.

Thanks

5

Hi, the computer crashed about 20 days ago… Correct? [2014/04/23 12:36:31 | 173,341,464 | ---- | M] () – C:\Windows\MEMORY.DMP

Go ther, get the file and upload it here: wikisend.com

Use the Virus Chest to get the dropboxes folder back

Excuse my crappy typing, it’s 6AM here.

6

I see you’ve also had Zoek on the System… Scan this file in VT… C:\Users\Gary\AppData\Roaming\wklnhst.dat C:\Windows\zoek-delete.exe

7

no micheal the computer never did crash at all it just would takeover for websites to up in the browser or programs would take a long time to open. Their is no file in the virus chest micheal the virus chest is empty.

Thanks

8

Do you have the aswMBR report?

9

HI Micheal I put the aswmbr log up in my first starting of my thread with all the other logs Micheal. I also emailed Essexboy so he might stop by this thread as well sometime today.

Good night Micheal

10
c;\users\Gary\Downloads\\[b]Dropbox 1.4.20.exe[/b]
before you delete ..... always upload and test file at VT
11

HI pondus I did not delete it myself avast free delete the rootkit automatically itself I had nothing to do with that I found when I looked at the log in the history Pondus.

Thanks

12

I was wondering if some one could please help me out by looking at the aswmbr log, the malwarebytes log, otl log and please tell me if this rootkit or any other threats are still on this computer please.

Thank you very much

13

We have lives Diddy, 1 member is away right now. Be patient. I am not allowed to help you due to the guidelines of GeekU. However, I will comment, (You should know this by now). MBAM is clean, and aswMBR looks to be fine.

14

HI Micheal I do understand that you guys do have lives I just wanted to make sure someone new that I need some help with this issue if their is one. I should update you guys and say that I did run a full scan again with avast free on this computer again and their was no rootkit or anything detected just some files that could not be scanned because they are all password protected. I also ran another malwarrebytes free scan after updating the definitions and malwarebytes did not find any thing bad on the computer either.

Thanks Micheal for your advice and your help.