Rootkit On Computer

Viruses and worms
1

Did a Full System Scan with Avast! today and found:

File Name: C:\Windows.…\tmp.edb

Severity: High

Status: Threat: Rootkit: hidden file

Tried to Move to Chest but got an Error message:

Error: The Request is not supported.

  1. I didn’t do a Bootscan as I was prompted to by Avast!

Should I do a Bootscan???

  1. Should I do a scan with Malewarebytes Anti-Malware?

  2. Need to get rid of the Rootkit; please help me get rid of it.

Thanks.

Recently, I’ve been getting a lot of pop up market research “surveys” for websites when I visit them, so maybe this is causing that to happen.

2

follow guide. http://forum.avast.com/index.php?topic=53253.0

3

Didn’t see the Extras.Txt file log after run scanning OTL. ???

I can’t think of anything I did incorrectly but only the OTL.Txt appeared.

Should I now continue with th aswMBR.exe?

4

edb files are legitimate and are transient they come and go fairly fast

Windows security database files ('.edb') may be scanned as part of behavior monitoring or in scenarios where the on-access scanner needs to verify the file type is as the filename suffix states. This can occur irrespective of the on-access scanned extensions list.

These files can contain a structure that the on-access scanner may interpret as malicious whilst the file is in transitional state.

Otherwise the logs look clean

5

Should I continue and download aswMBR.exe as outlined in the Cleaning Malware info thread??

6

You can if you wish to double check :slight_smile: