Hi all,
I have this machine hit by a hacktool.rootkit: I have an always-up-to-date Norton Antivirus 2006 that pops up a "Virus Alert" saying that the virus "was automatically deleted" whenever I try to open a partition(C: or D: ... etc.). Whenever I run a full system scan it says no threats are in the computer but it keeps behaving weird: a "Can't run 6-bit Windows program" message pops when the OS loads, Hidden Files and Folders cannot be shown (yes, I checked the Show box), partition opens in another window than the My Computer one, and it runs really slow. I've googled a lot of blogs to solve the probem and knew that the first thing to do is to turn off System Restore. What should I do then? Attached is the Hijack This! report.
P.S. The machine is not, and not likely to be, connected to the internet
Thanks.

Attached Files

hijackthis.log (5.2 KB, 3 views)

Hello Wissamyousif Welcome to PCHF

If you can click on my Pre-Work link, then follow the instructions fully, a member of our security staff will get to it ASAP.

I will move this thread to the HijackThis! Logs forum.

Hello,

Run HijackThis and check the following:

O4 - HKCU\..\Run: [amva] D:\WINDOWS\system32\amvo.exe

Click FIX CHECKED

Please perform a BitDefender Online Virus and Malware Scan

• Click on I Agree.
• An ActiveX warning box will appear, click on Install.
• Under Select What You Want To Check For Viruses.
• Please Check My Computer and Click Ok
• Now Click On Click Here To Scan
• Next, Click on Click here to export the scan report
• Save it to your Desktop.
• In your next reply, please include the BitDefender log and a fresh Hijackthis log.

Thanks.