Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account

Rootkit, network attacks and malware (mebix, ishi/ishigo)

  • Please log in to reply



    New Member

  • Member
  • Pip
  • 6 posts

I have avast installed on my machine and am getting some rootkit warnings from it. I allowed avast to delete these a couple of times but rootkit notices still show up sometimes.

I also noticed some malware (mebix, ishi, svsh0st, antimalware doctor etc) and deleted the respective files from file system besides removing registry entries for these. mebix was somehow being added to startup programs lists even though the file being pointed there had been deleted, but now it seems to be gone.

I have run SuperAntiSpyware and Malwarebytes malware removal on the machine lately. Malwarebytes showed some stuff in quarantine but I decided to delete those.

Current situation (OTL log attached)
1. I am continuously getting network shield messages of blocked connections ("Threat has been detected") to or from Any idea what could be causing it ? Is that site attacking from outside or is the connection initiated by some malware on my machine ?

2. Rootkit problem hasn't occured today but not sure if it is completely gone.
3. Some site named ...ishigo... was being accessed from my machine. The connection was being initiated by explorer. I noticed this with fiddler http debugging proxy tool.

Please check logs and inform if there's still something fishy and suggest cures.


Attached Files

  • Attached File  OTL.Txt   72.62KB   80 downloads

  • 0


Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP