Possible virus/Rootkit

[Rickster]

Sigh...hi all, about 30 min ago I was just browsing the web casually and reading some posts on myBB when all of a sudden I get the error "Windows must now restart because plug and play service terminated unexpectedly"

So I thought to myself, Oh ok something must have gone wrong and I rebooted.

I rebooted and the same thing happened again, except a different message "Windows must now restart because the COM service terminated unexpectedly" I got nervous and started doing various virus and rootkit scans.

Iv tried:

-TDSS Killer
-ComboFix
-Avast Quick scan

None of the above found a virus

Im currently doing a Avast extreme scan (High sensitivity deep scan) then if nothing is found ill try a SpyBot SD scan then after that a format.

Any help will be appreciated.

 

[sajunky]

Check your hardware, COM port suggests USB device. Unplug everything not essential for booting.

 

[Rickster]

Check your hardware, COM port suggests USB device. Unplug everything not essential for booting.

All that is plugged in is KB, Mouse ,LAN cable ,Screen and headphones.

 

[Rickster]

While we are on the subject, are keygens actually viruses or is it a false positive.

 

[ginggs]

I rebooted and the same thing happened again, except a different message "Windows must now restart because the COM service terminated unexpectedly" I got nervous and started doing various virus and rootkit scans.

COM = Component Object Model

While we are on the subject, are keygens actually viruses or is it a false positive.

I've seen many false positives in keygens, but that's not to say some are not really trojans.

 

[Praeses]

Try:

Malwarebytes Anti Malware
Malwarebytes Anti Rootkit
RogueKiller
Stinger

Did you run the latest version of ComboFix? Did you run it as administrator?

Edit: I also highly recommend Adwcleaner (http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner)

 

[sajunky]

COM = Component Object Model

Oops, COM service not a port, should read twice.
@Rickster, did you try ThinPC 7 downloads? This download link wasn't 100% clean, for sure!

 

[HavocXphere]

And you think this is a rootkit/virus because...?

sajunky has it right...I'd start with a memtest for good measure. Its just instability...either the hardware is screwed or you need a good old windows format (this fixes gout too).

 

[froot]

While we are on the subject, are keygens actually viruses or is it a false positive.

If you are using legitimately bought software then you shouldn't have any need for keygens.

 

[sajunky]

If you are using legitimately bought software then you shouldn't have any need for keygens.

For ThinPC you can't obtain legal license, I am afraid.

 

[Rickster]

Oops, COM service not a port, should read twice.
@Rickster, did you try ThinPC 7 downloads? This download link wasn't 100% clean, for sure!

I installed thin PC on a VM a while ago, no issues, this is my main pc that has this problem. I ran Malware Bytes anti rootkit and it found 1 "rootkit" and deleted it, now my PC is fine.


Whats wrong with your W7 Thin PC?

 

[sajunky]

Whats wrong with your W7 Thin PC?

1. Checksum didn't match published value on the Web site
2. Slipstreamed image, I would prefer original.
3. I posted mini-review on the original thread. Conclusion: Important features moved to the server and cannot be installed on the client (locked installation), unsuitable for the home user.