[nimchip]

Hi, I recently received a PC from a family member that had Dr Guard installed and I've been trying to no avail to remove it completely and to restore its functionality. At first I didn't know what Dr Guard was so I tried numerous things and found out that the task manager and safemode weren't working. I tried installing Malwarebytes Anti-Malware to check it but it wouldn't open, so after searching the internet I found out how to run MS Anti-Spyware tool and it found 10 viruses and spyware. After that I read how to make Malwarebytes Anti-Malware run by renaming it and so I installed it and later renamed the exe file in the program files directory to make it run. It found 20 additional viruses.

After that I thought that the problem was fixed so I tried installing AVG Free but at the very end of the installation it said that it couldn't start some .dll. So I searched again and saw that this could be caused by a rootkit, and so I downloaded and ran ComboFix by renaming it and found more problems. After that I ran numerous tools recommended by topics in this site such as OTS and RootRepeal but I am not sure if the problem is fixed. I have included the logs (numbered by run order) of all the scans I did except the first Malwarebytes Anti-Malware one in this topic.

Please help, otherwise I'm thinking I'm gonna have to ask my family member to see if I could reformat in order to completely obliterate this rootkit.

PS: I should add that after running most of these tools, the task manager option in the task bar is now lit up. However, I cannot run Internet Explorer as it is marked for illegal activity or something like that unless I run it as administrator. I haven't tried booting in safe mode.

Attached Files

•  logs.zip   279.02KB   82 downloads

Edited by nimchip, 15 March 2010 - 01:03 PM.