Newbie here, please transfer this to the appropriate forum if it doesn’t fit here. Thanks
GMER log using Hirens Boot CD
10 year old PC Win XP trying to clean it up for home use using utilities after booting with Hirens 15.1.
GMER log shows mulitple entries in the Rootkit/Malware tab, see below.
What is the proper procedure for removing (fixing) the identified problems?
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2012-12-03 17:33:50
Windows 5.1.2600
Running: G-MER.exe; Driver: B:\Temp\kwtdypog.sys
---- Devices - GMER 1.0.15 ----
Device \Driver\ACPI_HAL \Device\00000008 HALAACPI.DLL
AttachedDevice \Driver\ftdisk \Device\HarddiskVolume1 dcrypt.sys
AttachedDevice \Driver\ftdisk \Device\HarddiskVolume1 snapman.sys (Acronis Snapshot API/Acronis)
AttachedDevice \Driver\ftdisk \Device\HarddiskVolume2 dcrypt.sys
AttachedDevice \Driver\ftdisk \Device\HarddiskVolume2 snapman.sys (Acronis Snapshot API/Acronis)
AttachedDevice \FileSystem\Fastfat \Fat dc_fsf.sys
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Ntfs \Ntfs dc_fsf.sys
---- System - GMER 1.0.15 ----
INT 0x1F \I386\SYSTEM32\HALAACPI.DLL 80A18FD0
INT 0x37 \I386\SYSTEM32\HALAACPI.DLL 80A18728
INT 0x3D \I386\SYSTEM32\HALAACPI.DLL 80A19B70
INT 0x41 \I386\SYSTEM32\HALAACPI.DLL 80A199CC
INT 0x50 \I386\SYSTEM32\HALAACPI.DLL 80A18800
INT 0xC1 \I386\SYSTEM32\HALAACPI.DLL 80A18984
INT 0xD1 \I386\SYSTEM32\HALAACPI.DLL 80A17D34
INT 0xE1 \I386\SYSTEM32\HALAACPI.DLL 80A18F0C
INT 0xE3 \I386\SYSTEM32\HALAACPI.DLL 80A18C70
INT 0xFD \I386\SYSTEM32\HALAACPI.DLL 80A19464
INT 0xFE \I386\SYSTEM32\HALAACPI.DLL 80A19604
---- Kernel code sections - GMER 1.0.15 ----
? \I386\SYSTEM32\NTKRNLMP.EXE kernel module suspicious modification
? \I386\SYSTEM32\NTKRNLMP.EXE The system cannot find the file specified. !
INT 0x01 \SystemRoot\system32\drivers\dummy.sys BBF407C0
INT 0x03 \SystemRoot\system32\drivers\dummy.sys BBF407E0
---- Threads - GMER 1.0.15 ----
Thread System [4:144] BACF9096
---- Kernel code sections - GMER 1.0.15 ----
? X:\i386\system32\Drivers\PROCEXP141.SYS The system cannot find the file specified. !
---- EOF - GMER 1.0.15 ----