Hi, here is the requested log for you.

Malwarebytes' Anti-Malware 1.41
Database version: 2938
Windows 6.0.6001 Service Pack 1
11/10/2009 10:22:02
mbam-log-2009-10-11 (10-22-02).txt
Scan type: Full Scan (C:\|D:\|F:\|)
Objects scanned: 268054
Time elapsed: 3 hour(s), 52 minute(s), 40 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)


Steph

Stephanie,

Next, go HERE to run Panda ActiveScan 2.0

• Click the big green Scan now button
• If it wants to install an ActiveX component allow it
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
• Once the scan is completed, please hit the notepad icon next to the text Export to:
• Save it to a convenient location such as your Desktop
• Post the contents of the ActiveScan.txt in your next reply

Sorry it has taken a while but here is the text file

Stephanie,



Please visit Virustotal

• Click the Browse.. button
• Navigate to the file c:\windows\system32\autochk.exe
  Click the Open button
• Click the Send button
• Please do the same for c:\windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3e d49c1c122ef\autochk.exe
• Copy and paste the results into a new reply in this thread please.

If VirusTotal is busy please use Jotti

here are the perma links, it wouldn't let me copy and paste the reports, any problems please let me know.

thanks


FIRST ONE

Virustotal. MD5: 6fd88dc2669d49d2f95bcad80563ca1c Trojan Horse Win32.NtRootKit.270 Suspicious file

SECOND ONE

Virustotal. MD5: 6fd88dc2669d49d2f95bcad80563ca1c Trojan Horse Win32.NtRootKit.270 Suspicious file

Stephanie,

Please navigate to and delete the following files:
c:\windows\system32\autochk.exec:\windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3e d49c1c122ef\autochk.exe

Once that's done please let me know how things are running

Hi Crush,

no luck with the removal of them 2 files as my lappy refuses to let me delete them.

look forward to hearing from you