Question : Need assistance with a CF Script, rootkit that will not go away

Hi All,

We have a machine that has a malware infection that is persistent.  CF reports a rootkit right when it's run and has to reboot, it thinks it removes it but the next time CF runs the same thing happens.  The CF log is attached.

MBAM, SAS, Hitmanpro and NIS have all been run and find nothing at all.  CF is the only thing that finds something, but can't seem to remove it.  

Can anyone help?  We are seeing browser redirects and occasionally the whole machine locks.  

Thanks!

cflog.txt (18 KB) (File Type Details) 

Cf log

Answer : Need assistance with a CF Script, rootkit that will not go away

On the formula cell, hover your cursor over the bottim right corner until the cursor turns into crosshairs (+ sign). Once it does, click and drag it down tge column until you've reached your desired row.

Posted via EE Mobile