Is this a Rootkit virus?

  bof:) 11:28 04 Jun 08
Locked

Hi all, my wife used my laptop last night and said when she came to shut down it said there was 'other users' on the laptop.

I checked that she had not logged on in her own user option but she insists she used my login option.

I've had a look in 'Users' in Control Panel and it only shows the users that should be there.

Just to make sure I ran RootKit Revealer from sysinternals (click here)

It found one thing at the following settings:

HKLM\S-1-5-18\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\ParseAutoexec

Time Stamped: 04/06/2008

Size 5 bytes

Description data Mismatch between Windows API and raw hive data

Thankyou

Mike

  Press Man 13:14 04 Jun 08

bof:)


Go here click here and register it's free. Then download hijackthis, run it and save a log file then post it on malware removal site and somebody will have a look at your log and advise what if anything needs to be done. It may take a little time for someone to contact you so do'nt give up, there good.

  bof:) 18:11 07 Jun 08

Hi Press Man thanks for your help, I've done as you suggested and will leave this posting open until I hear back from MRU and let everyone know what was found.

Thanks again,

Mike

  bof:) 21:52 11 Jun 08

hi all, after MRU checked out my HiJackThis log they gave me an all clear for any virus or spyware.

Thnkayou for your help with this,

Mike

This thread is now locked and can not be replied to.

The Legend of Zelda Breath of the Wild review: Five hours with Zelda on the Nintendo Switch

1995-2015: How technology has changed the world in 20 years

How the painting-like animated sequences in A Monster Calls were created by Glassworks Barcelona

The 22 best Safari extensions | Best Safari plugins: Improve Apple's Safari web browser with these…