MOSERG

Thanks so much for your help!

Clean scan...nothing detected.

Updated log, let me know what you think. Key not found this time -- because it was removed or because of invalid character? Rerunning MBAM scan now. Fixlog 05092016 - 1.txt

Looks like one of the registry entries could not be removed: Fixlog.txt But I got a clean scan after reboot: MBAM 05092016.txt

Requested files: 8012b.zip 979b9.zip

Awww...never mind. Somehow a different user name got stored in my "remember me" and I didn't notice. All good now.

Every time I log into the forum, I have to reset my password. A quick search indicates other have the issue, but I couldn't find a resolution. I have tried on both Chrome and Firefox browsers. Is this a known issue, and is there a fix/work around? Thanks.

Here are the updated FRST logs FRST 05062016.txt Shortcut 05062016.txt I have not been notified of registry changes by Avast or Spybot. Thanks for your help.

In addition to the .bat, there is a shortcut and a file with.0cc512 as the format type. Included all 3 files in the zip: 2a6c0.zip

I deleted the item from quarantine, rebooted, and re-scanned. Here are the updated logs: FRST 05052016.txt Addition 05052016.txt MBAM Log 050516.txt

Here is the updated log. Note that it detected and quarantined rootkit.fileless.mtgen during the scan even though it shows no malicious items in the log. Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 5/4/2016 Scan Time: 11:58 AM Logfile: Administrator: Yes Version: 0.0.0.0000 Malware Database: v2016.05.04.05 Rootkit Database: v2016.04.17.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 10 CPU: x64 File System: NTFS User: garym Scan Type: Custom Scan Result: Completed Objects Scanned: 575546 Time Elapsed: 55 min, 31 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end)

I need help removing rootkit.fileless.mtgen. Malwarebytes detects and attempts to delete, but it does not remove the rootkit. FBAR and MBAM logs attached. I appreciate any guidance you can provide. Addition.txt FRST.txt MBAM log.txt