[Nick_Danger]

Hello, I am helping a friend clean up his system after infecting himself with spyware protect 2009 and successfully removed it via malwarebytes. Then ran mcafee, combofix, smitfraudfix, avz and threatfire they killed a few more virus. VUNDO.H, Zlob.H and a bunch of files in the system32 subdir armhzhw.dll, wwwlpoxi.dll, yhs783ijfo3e.dll, autochk.dll and ntdll64.dll. also had the registry and task manager disabled but used combofix to clean that up too. now McAfee Enterprise 8.5.0i is constantly reporting NTOSKRNL-HOOK Generic RootKit.d! rootkit on every reboot says it is a trojan and that it is deleted but on next boot or scan it reappears and I am unable to remove it even after perusing other posts that solved this problem. Currently scanning with kaspersky online scanner and it has detected Trojan-Spy.HTML.Fraud.gen x2 and Trojan-Spy.Win32.Zbot.rxp but it still has a way to go. Please any help would be appreciated! attached hijack this and SD fix logfiles as a start. -Nick  SystemReport.txt   26.6KB   390 downloads

Attached Files

•  hijackthislog.txt   5.58KB   137 downloads

Edited by Nick_Danger, 27 April 2009 - 06:18 PM.