View Single Post
Old 08-24-2006, 07:40 AM   #64 (permalink)
Ried
Assistant Manager, TSF Academy; Moderator/Analyst Security Team
 
Ried's Avatar
 
Join Date: Jan 2005
Location: Ohio
Posts: 26,953
OS: WinXP and Vista


Hiya,
Quote:
what does Object is locked skipped mean?
Kaspersky is scanning protected Windows Files--no worries.

vcshost.exe is still there. Let's scan with this tool:

Download and Install UnHackMe
Unzip to a folder

Double click "unhackme300b2.exe" to install

Bring up UnHackMe

Click the "Check Me Now" button

When finished, if a Rootkit is found it will show you the results.

Click the "Stop" button and reboot.

-----------------------------------

Please let me know if it found anything.

-----------------------------------

Please go Start->Control Panel. In the control Panel, be sure you are on Classic View and then choose System.
*In the System window, go to Advanced tab. There, under the headline of Startup and Recovery, please click the Settings button.
*Under the headline of System failure, please UNcheck the box that says Automatically restart. Now, instead of just rebooting, your pc will show a blue screen including information that may help. Please, when it happens, either take a picture of it and upload it here or write down the message that it gives on your next reply.

I'll need a new combofix log as well.
__________________

Member of ASAP since 2005
Member of UNITE since 2006

"It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."
Ried is offline