Infection in a WinXP SP2 machine

theantonis · 05-22-2009, 04:21 AM

Hello,

I am facing a problem for a couple of days now that seems impossible to resolve...

I was using outlook and had the preview pane enabled. as soon as I opened my inbox folder the first email appeared. for my bad luck, it contained a virus which my Symantec Antivirus (full version: 10.0.0.359, with updates on 20/5/09) detected. I deleted the email, unfortunately it seems my system has been compromised.

The problems:
Keep getting reports from my antivirus that it found and successfully deleted files like "hacktool.rootkit", or "downloader".
Apart from that, there was a file in one of my folders in Docs&Settings under a folder named "nameOfFolder.exe" which I could not get rid of - I turned to safe mode and removed it, but it came back up on restart to normal mode. I finally managed to remove it today by first renaming and then deleting (!).
Moreover, there is a file in my system32 folder with the name bootok.exe which from what i read is a virus/trojan - which again I cannot get rid of: i can delete it, but it keeps coming back.
Finally, I cannot go to my registry editor.

I have updated my antivirus but in every scan my machine appears clean...
I also scanned with malwarebytes' antimalware: clean.
also with rootkit.reavealer: clean.
tried also to run HiJackThis, but it cannot run...

any help much appreciated :)

theantonis · 05-22-2009, 05:41 AM

As a continuation to my original post:

I would like to correct the mistake where is said: "I also scanned with malwarebytes' antimalware: clean."

I scanned, but it showed multiple infections.

Please see attached file.

Thank you!

theantonis · 05-25-2009, 01:37 AM

hi guys, could anyone help, please, i've been stuck here with that thing in my machine and i don't know what to do!

thank you...

05-25-2009, 01:37 AM	#3 (permalink)
theantonis Registered User Join Date: May 2009 Posts: 3 OS: winXP SP2	Re: Infection in a WinXP SP2 machine hi guys, could anyone help, please, i've been stuck here with that thing in my machine and i don't know what to do! thank you...