This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Possible infection [System32\Config]

2 min read

This thread's last reply is from November 1, 2009, 8:51 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Hi!

My problem:
I believe something's wrong with my computer. To be more precise, I believe I've got a rootkit. Obviously formatting came first to my mind. And I intend to do it, if I must. But I want to know if I really am infected.

I've, by pure luck, discovered something's xxxxxx with my windows folder. What happened is, I extracted something with winRAR, and I saw the default location was sys32. Which is weird, because I don't extract stuff to there. So I went to check for recent changes in my sys32 folder, and I'll be damned, I found, sys32\config folder, that was changed just recently.

I googled it, and found some articles saying it is an infection. Anyway I read on, and by pure chance find your awesome forum :) . I go to check again for recent changes, and I find that the virus is xxxxxx with my drivers\etc folder, and some other folders. So I decide to ask you for help.

Well, I don't want to brag, but I do have some moderately advanced knowledge of desktop, so I understand a bit more than many others.

I really hope you help me. But until you respond, I'll keep my passwords away from this computer. Obviously mail and some other basic passwords are gone, but I don't rly care about that. I don't have anything important there. :mrgreen:

What should I do?
I got 2 screens, of my sys32 and of config folder. Here are the thumbnails:



What do you need? I believe you need hijackthis logs. But what else?

Cheers, and thanks for the reply!

Edited to remove obscene language. If you want help from this site, clean up what comes out of your mouth! We don't tolerate such behavior here. If your language skills are so limited that you cannot express yourself without resorting to expletives, then we suggest you go elsewhere!
In order for us to help you it is necessary that you provide us with a HijackThis log. Please follow the guideline at the link below to start a new topic and post your HijackThis log by pasting it into your post. Do not utilize attachments.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<