Hi new user.My computer has been running strangely passwords to emails have changed etc etc.
I was told to run rootkit revelaer here is the log below

HKLM\S-1-5-21-1698683601-2966927733-1597234714-1006\Software\Microsoft\MediaPlayer\Preferences\BackgroundScanCompleteDate 23/07/2006 13:02 40 bytes Data mismatch between Windows API and raw hive data.
HKLM\S-1-5-21-1698683601-2966927733-1597234714-1006\Software\Microsoft\Windows\ShellNoRoam\Bags\18\Shell\MinPos1024x768(1).x 23/07/2006 12:40 4 bytes Data mismatch between Windows API and raw hive data.
HKLM\S-1-5-21-1698683601-2966927733-1597234714-1006\Software\Microsoft\Windows\ShellNoRoam\Bags\18\Shell\MinPos1024x768(1).y 23/07/2006 12:40 4 bytes Data mismatch between Windows API and raw hive data.
HKLM\S-1-5-21-1698683601-2966927733-1597234714-1006\Software\Microsoft\Windows\ShellNoRoam\Bags\18\Shell\ScrollPos1024x768(1).y 23/07/2006 12:40 4 bytes Data mismatch between Windows API and raw hive data.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System* 06/07/2006 19:08 0 bytes Key name contains embedded nulls (*)
HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg 12/06/2006 18:30 0 bytes Access is denied.


Is there a problem with this log? could some of your experts help

Spysweeper also found this but unable to delete.

19:23: Found System Monitor: potentially rootkit-masked files
19:23: $fspini$.dat (ID = 0)
19:23: flocker.usr (ID = 0)

I hope ive layed out the logs on this page ok!

Thanks all for help

The rootkit that you have belongs to Daemon tools. Please see:
http://www.sysinternals.com/blog/2006/02/using-rootkits-to-defeat-digital.html

thanks man I have daemons tools on my pc for mounting images so nothing to worry about.


cheers