[Render]

On what file? volsnap.sys maybe?

[Advertisements]

not sure - sure i skip cause then at least we can come back to it - rather than attempting to disinfect as it looks like it doesn't want to do - the scan is only 45% finished as it has been stopped on teh decision of this for 4 hours!!

[rdbadger]

not sure - sure i skip cause then at least we can come back to it - rather than attempting to disinfect as it looks like it doesn't want to do - the scan is only 45% finished as it has been stopped on teh decision of this for 4 hours!!

[rdbadger]

should not sure! should i skip?

[Render]

OK. Skip it. It's probably TDL3 rootkit. And there is also new variant of TDL4 rootkit detected by Rogue Killer.

Are you using this computer for banking?

[rdbadger]

OK. Skip it. It's probably TDL3 rootkit. And there is also new variant of TDL4 rootkit detected by Rogue Killer.

will do



Are you using this computer for banking?


...not really, but looks as though I certainly won't be ever again!!

[rdbadger]

i mainly do banking in store

[rdbadger]

...the same virus alarm has now come up 3 times does this mean it is in more than 1 place?

[Render]

Well... it's a rootkit. That means you don't have control over this computer. Computer is compromised.

[rdbadger]

...up to 86%

[rdbadger]

done! at last!

Attached Files

•  avptool_sysinfo.zip   22.23KB   121 downloads
•  KASPERSKY LOG 1.txt   3.48KB   218 downloads

[rdbadger]

though, why does it seem the otl multiplied the threats??

[rdbadger]

oh and we skipped that MEM one

[rdbadger]

....what is up next? Could you also please tell me why/how my firewall was disabled?
thanks

[Render]

Could you also please tell me why/how my firewall was disabled?

Your computer is badly infected with rootkit.

1. Preferably from a clean computer, please download the following: gparted-live-0.10.0-3.iso (115 MB)

When you have the .ISO file downloaded, you need to create a bootable disk or flash drive with it, using a clean PC to do that. The .ISO file is a disk image. It should NOT be burned as a regular file. You need a program like BurnAware Free or ImgBurn that can burn an .ISO image. I think a CD is best as there is no way anything can write on it after it is made, but the USB may be more convenient and easier.


2. Now, please boot off of the newly created GParted CD. See How to Set BIOS to Boot from CDROM for information on how to boot from the CD.

You should arrive to the following screen:

Press the ENTER key


By default, "do not touch keymap" is highlighted. Leave this setting alone and press the ENTER key.


Next, choose your language and press the ENTER key. English is the default setting [33]


Once again, at this prompt, press the ENTER key.

You will now be taken to the main GUI screen below


Please take a picture of this screen (camera or phone pictures will work just fine), and post it here for me to see. It is very important that you complete this step.

[rdbadger]

Am on to it now - another question -
Are the "windows updates" that are coming up along with the firewall to do with the rootkit? As they happened when I hadn't been connected to the internet - I have chosen not to update, just in case - what do you think?