SVC: swcust removal issues

Viruses and worms
1

Having an issue with a PC that has a rootkit that will not remove or is being falsely reported. Below is the AdwCleaner:

AdwCleaner v3.003 - Report created 09/09/2013 at 09:21:25

Updated 07/09/2013 by Xplode

Operating System : Windows 7 Professional Service Pack 1 (64 bits)

Username : searle - CC-SALES-SE1

Running from : C:\Users\searle\Downloads\adwcleaner.exe

Option : Scan

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\ Internet Explorer v8.0.7601.17514

-\ Mozilla Firefox v8.0 (en-US)

[ File : C:\Users\searle\AppData\Roaming\Mozilla\Firefox\Profiles\7rxxlk49.default\prefs.js ]

[ File : C:\Users\mditchburn\AppData\Roaming\Mozilla\Firefox\Profiles\knl2f3di.default\prefs.js ]

[ File : C:\Users\ceichhorn\AppData\Roaming\Mozilla\Firefox\Profiles\ql2ge5p1.default\prefs.js ]

-\ Google Chrome v29.0.1547.66

[ File : C:\Users\searle\AppData\Local\Google\Chrome\User Data\Default\preferences ]

[ File : C:\Users\mditchburn\AppData\Local\Google\Chrome\User Data\Default\preferences ]

[ File : C:\Users\ceichhorn\AppData\Local\Google\Chrome\User Data\Default\preferences ]

AdwCleaner[R0].txt - [4747 octets] - [09/09/2013 09:10:27]
AdwCleaner[R1].txt - [1217 octets] - [09/09/2013 09:21:25]
AdwCleaner[S0].txt - [4756 octets] - [09/09/2013 09:11:48]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1337 octets] ##########

2

Can you do what is shown here and attach logs please? http://forum.avast.com/index.php?topic=53253.0

Best run in order listed.

When done malware removers will over the logs.

3

Already in the process of running through it atm.

Will continue till finished.

OTL Files Attached

4

aswMBR log

5

Roguekiller wont start on a windows 7 pc.

Any ideas ?

6

Rogue Killer is not needed in your case. Its just for Hard drive things when you cannot see your files, programs etc.

7

Ahh cool. Well let me know any ideas from the above info.

8

Forgot the MBAM results

9

Hi that appears to be your ZeroCD Sierra Wireless, and the alert is on the null values… Have you tried to disable it recently ?

10

Do you mean disable the warning or disable the wireless software ?

11

Disable the wireless software. As the data is null which is like a red flag to Avast. However, it is a false positive