Mebroot (uninstall.exe) isn't getting deleted

April 29, 2009 at 04:55:58
Specs: Windows XP SP3, 2GB
Norton found Trojan.Mebroot, on C:\Users\All Users\Start Menu\Programs\Startup\uninstall.exe

Every time I quick scan it finds it again, even after the scan is finished and the files are deleted, the files are re-created....

On hijackthis I saw , "O4 - Global Startup: uninstall.exe"
I "fixed" it, but every time I re-scan its there again. I tried all on safe mode as well.

Yours, Daniel.

See More: Mebroot (uninstall.exe) isnt getting deleted

Report •

April 29, 2009 at 07:36:51
Try to scan with Malwarebytes' Anti-Malware

or Scan with eset online Scanner

Report •

April 29, 2009 at 20:46:59
Mebroot is updated now and it is considered the most stealthiest rootkit ever, its appearing as sinowal or even torpig or tropig. try this manual removal guide to remove mebroot

Report •

April 30, 2009 at 00:16:55
I ran ESET - nothing found
I already got Malwarebytes, I'll run and tell if anything found.
EDIT: Nothing found

james88: I didn't found anything they said on the guide.. no notepad, nor on process explorer... only the C:\Users\All Users\Start Menu\Programs\Startup\uninstall.exe ... and sometimes blue screens for no reason..

Report •

Related Solutions

May 1, 2009 at 01:38:03
i had this problem, except it didn't use unistall.exe, but managed to attach itself to a sys 32 file, it is difficult to remove

in the end i formatted 3 hard-drives at a loss of 750GB of data

so good luck

Computers make very fast, very accurate mistakes.

Report •

June 3, 2009 at 22:04:12
Man, you are already told to do manaul removal. i hope you can get rid of this virus by doing manual removal steps. Good Luck

Report •

Ask Question