Rootkit? What should I do? As of 7/13/12 no response yet, please advise.

Please help me, I have no idea what just happened. I ran a scan like normal, but it came up saying 7 items were infected with a Rootkit! So naturally I’m horrified and I told it to move to chest, and then it said it had to reboot which I did. Then when the computer comes back up, I check the virus chest but there are no new items in it? Shouldn’t they be in there if they were something bad? I’m very confused. I took a screenshot of the log when it popped up, but it won’t let me screenshot the entire address of the file, it abbreviates it so I’m not even sure how to show it to you.

This computer runs Windows 7 64 bit. I’m super confused because I even ran Malware Bytes and it didn’t find anything! And just the other day I ran super anti spyware and no problems. And I haven’t even had any problems that I’ve been aware of.

The items that were listed as bad were called msxml3r.dll and msxml6r.dll, I tried looking them up online but really there were a ton of results and I just have no idea what these are or if they are a real rootkit or just a false positive.

[Edit] Also, is it possible that I accidentally deleted instead of moving to chest? I had the thing at the bottom selected as “move to chest” but I didn’t change the individual items, is it possible to find out what this thing was? Also, in the scan logs the Boot Time scan says that there was nothing found, even though the first scan said I had to do a boot time scan to fix the problem.

I just finished another full Avast scan, nothing detected. Another Super Anti Spyware scan, nothing detected. Spybot Search & Destroy, nothing detected. And here’s the log from Malwarebytes:

Malwarebytes Anti-Malware 1.62.0.1300 www.malwarebytes.org

Database version: v2012.07.11.11

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Dragon :: NEVERNEVER [administrator]

7/11/2012 7:58:20 PM
mbam-log-2012-07-11 (19-58-20).txt

Scan type: Full scan (C:|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 353433
Time elapsed: 45 minute(s), 32 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

What does a rootkit typically do? I’m not sure how they’re dangerous so I don’t know what I should be on the lookout for. Please help.

Please can someone tell me what this thing was and whether or not it was dangerous? I need to know if I should be checking my credit card statements and stuff. Please help.

I wrote down one of the things that came up if it will help?

c:\Windows\winsxs\wow64_microsoft-windows-msxml60_31bf3856ad364e35_6.1.7601.17857_none_f0c072e3e1f46e99\msxml6r.dll

That’s one of the things it called a rootkit. Is it just a false positive?

Also, can a rootkit infect your music or things like that, or does it just screw up the computer? I have my music backed up but since I have no idea when this happened I don’t know if it’s safe or not (it’s so large it’s on an external hard drive).

I don’t recall downloading anything apart from The Secret World recently, I added a bunch of old radio shows my husband had bought but I remember scanning everything after that and it was fine. I have Noscript, Firefox, and Ad Block plus. I just don’t understand what this could be or where it could have come from.

Hi I still have no answer to this, can anyone at least tell me if it’s not possible to help me, so I don’t keep waiting for an answer? I posted everything I could think of, was wondering if maybe I should format my computer?

I am sorry it took so long for someone to assist you, but I just found your post and realized no one came to help you.

Check the information on the first post of this thread under Virus/Worms for you to check your machine for malware: http://forum.avast.com/index.php?topic=53253.0.

Follow the directions of obtaining an MBAM log (make sure you update MBAM first) and the OTL logs (save them as ANSI), and aswMBR log. Post the logs as an attachment (Additional Options > Attach > Post).

Please do not make any further changes to your machine after you have provided the logs.

IMPORTANT: If you are on a home network, disconnect the affected machine from the network. Do not share a USB/flash drive with this affected machine. Do not use this machine unless a malware removal specialist instructs you do to malware removal instructions; use a different machine to check email, sync your phone or other devices on this machine.

Let us know if you have any questions. Thank you.

That has the appearance of a false positive, but lets see