Need help people - Rootkit found!

Viruses and worms
1

C:/Windows/ServiceProfiles/LocalService/AppData/Roaming/PeerNetworking/idstore.sst

High Danger.

Rootkit: System modification.

What should I do? I think I got this before, deleted it, and scanned again and got nothing. But when I scanned after having gone to some of my usual internet sites I visit, I suddenly got it again.

I dont really understand, its only ONE malicious hit, Ive got no hits on Malwarebytes and I always get one after Ive been to internet. And no, I dont visit those kind of sites.

So question is, what should I do with this idstore.sst? And is it possible to scan internet sites too?

Oh and I had recently updated Firefox 5 too before all this happened too, in addition of installing some addons like Noscript and such. Nothing more prior to this, I guess.

So what do you think I should do to get rid of this annoyance?

2

Start by reading this sticky: http://forum.avast.com/index.php?topic=53253.0

3

Download http://public.avast.com/~gmerek/aswMBR.exe][aswMBR.exe[511KB ) to your desktop.

Double click the aswMBR.exe to run it

Click the “Scan” button to start scan

http://public.avast.com/~gmerek/aswMBR1.png

On completion of the scan click save log, save it to your desktop and post in your next reply

http://public.avast.com/~gmerek/aswMBR2.png

also use kaspersky tdss killer.
and follow the steps:

OK, another tool to check for other types of rootkit.

[*]Download TDSSKiller and save it to your Desktop.
[*]Extract its contents to your desktop.
[*]Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillermain.png

[*]If an infected file is detected, the default action will be Cure, click on Continue.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillerMal-1.png

[*]If a suspicious file is detected, the default action will be Skip, click on Continue.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillerSuspicious.png

[*]It may ask you to reboot the computer to complete the process. Click on Reboot Now.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillerCompleted.png

[*]If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
[*]If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of “TDSSKiller.[Version][Date][Time]_log.txt”. Please copy and paste the contents of that file here.

4

First you are constantly posting in topics which are either old or the OP hasn’t responded, this really isn’t helpful, building up your post count perhaps, but not helpful to the OP.

Second you are constantly firing off a number of tools without waiting for analysis of the first. This too isn’t helpful for the OP if the first tool shows that it can deal with the problem or that problem doesn’t exist then the second tool is redundant.

You have to do the leg work in the analysis to suggest the correct tool for the job and not just be a one trick pony and fire off a few tools without recourse to analysis.

Not to mention it makes the topic very long, we’re going to get RSI in our scroll button finger.