Pretends to be a Microsoft Antivirus Program

November 27, 2009 at 14:47:56
Specs: Windows XP, 1.5Ghz, 1gig Ram
Here's the thing. I haven't downloaded anything recently, I don't know how the heck it got on my laptop. What I DO know is that Spybot and Malwarebytes detected it (presumably that's what they detected), claimed to have removed, then upon start up it's back. When I ran Spybot and then Malwarebytes I had rebooted into safe mode, seeing as that usually works for the tough ones.

If anyone wants to help, let me know what questions I should answer and I'll be glad to comply.

See More: Pretends to be a Microsoft Antivirus Program

Report •

November 27, 2009 at 15:02:55
Please save this file to your desktop.


Please double click on the Win32kDiag file and post the log it produces. This log might be quite lengthy and may take more than one post to get all of it posted.

Please run RSIT.exe by random/random and post its logs.

Download random's system information tool (RSIT) by random/random from the following link and save it to your desktop.


1. Double click on RSIT.exe to launch program.
2.(Vista Users Only) Right click on the RSIT.exe icon and select "Run as Administrator" to run the program.
3. Click Continue at the disclaimer screen.
4. Your firewall may alert you that RSIT is requesting Internet access. Please allow it.
5.Once it has finished, two logs will open: log.txt<-- this will be maximized and info.txt<-- this will be minimized. Both logs will be located at C:\RSIT.exe.

Please post the contents of both logs (in separate post) in your next reply.

Report •
Related Solutions

Ask Question