As of yesterday I have been receiving repeated rootkit warnings from Avast which advised I remove infection, complete a boot scan and restart however it continues to indicate there is an issue with- SVC:WindowsMangerProtect >C:.…\ Win32:Evo-gen[Susp] When I try to find the file it says it doesn’t exist, I am unsure how to deal with this as it offers no indication there is an issue during the boot scan only after the pc is restarted. Is this a virus or something else?
:o Thankyou for posting the link, since I don’t have the know how myself to fix this issue, I’m not willing to do anything at all as I am unsure what has happened other than what I can glean from the reports.
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe
There appears to be a conflict with Cryptoprevent as it completely crashed during the restart after installation citing a bad pool group and initiated a physical dump. I had to uninstall using safe mode but it has crashed again since then. I am unsure why it didn’t like my system and I am unsure if what may have happened.EDIT There is definitely an issue it is simply keeps crashing unexpectedly, has done so about 3 times so far since i uninstalled Cryptoprevent, cites bad pool again and dumps as before. I have included a txt file of crash log.
I have tried to zip minidumps but it keeps telling me file not found or no read permission, do I need to go to Folder options and change the settings to see the file? EDIT : I managed to work it out just copied to desktop and zipped from there to bypass restriction.
Open an elevated command prompt by doing the following :
Go Start > All Programs > Accessories
Right click command prompt and select run as administrator
In the black box type the following command then enter
I have posted the MBAM,FRST and ADDITION files, aswMBR attached also for your consideration.
Thankyou for all your assistance, I am pretty much a luddite and your help is very much appreciated, i will run these programs as instructed.