This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Cannot remove Rootkit.Agent

1 min read

This thread's last reply is from June 7, 2010, 4:31 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Hello

Both my AntiVir and my MB AntiMalware programs have detected Rootkit.Agent, but neither of them can get rid of them. The AntiMalware asks to restart the computer in order to get rid of it on reboot, but when it's booted back up, I did another scan and it's still there. My AntiVir also says that it's moved it, but upon another scan, it's still there!

Here's the most recent log from AntiMalware

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4174

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

6/6/2010 7:09:16 PM
mbam-log-2010-06-06 (19-09-16).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 277049
Time elapsed: 51 minute(s), 52 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\drivers\pbdclifl.sys (Rootkit.Agent) -> Delete on reboot.
In order for us to help you it is necessary that you provide us with a HijackThis log. Please follow the guideline at the link below to start a new topic and post your HijackThis log by pasting it into your post. Do not utilize attachments.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<