(Canned Speech) GMER

[AsSaSs@iN]

Download GMER Rootkit Scanner from here to your desktop. It will be a randomly named executable.

• Double click the exe file.
  
• If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.
  • 
    Click the image to enlarge it
    
• In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked
  • IAT/EAT
    
  • Drives/Partition other than Systemdrive (typically C:\)
    
  • Show All (don't miss this one)
    
• Then click the Scan button & wait for it to finish.
  
• Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  
  
• Save it where you can easily find it, such as your desktop, and attach it in reply.
  

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

NOTE: It is not unusual for GMER to take glitch and not scan. Just tell me.

Code:

Download [b][color=limegreen]GMER Rootkit Scanner [/color][/b]from [b][url=http://www.gmer.net/download.php][color=lightblue]here[/color][/b][/url] to your desktop. It will be a randomly named executable.
[list]
[*] Double click the exe file.
[*] If it gives you a warning about rootkit activity and asks if you want to run scan...click on [b]NO[/b], then use the following settings for a more complete scan.
[list]
[url=http://i582.photobucket.com/albums/ss269/Cat_Byte/GMER/gmer_screen2-1.gif][img]http://i582.photobucket.com/albums/ss269/Cat_Byte/GMER/gmer_th.gif[/img][/url]
[i]Click the image to enlarge it[/i]
[/list]
[*] In the right panel, you will see several boxes that have been checked. Ensure the following are [b]unchecked[/b] [list]
[*] IAT/EAT
[*] Drives/Partition other than Systemdrive (typically C:\)
[*] Show All (don't miss this one)
[/list]
[*] Then click the Scan button & wait for it to finish.
[*] Once done click on the [b][Save..][/b] button, and in the File name area, type in [b]"Gmer.txt"[/b] or it will save as a .log file which cannot be uploaded to your post.

[*]Save it where you can easily find it, such as your desktop, and attach it in reply.
[/list]

[i][color=#FF0000][b]**Caution**[/b][/color]
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries [/i]

[color=#FF0000][b]NOTE:[/b][/color] It is not unusual for GMER to take glitch and not scan. Just tell me.