[ROOTKIT INFECTION] PUP.BitMiner: kwrd.dll

[jholland1964]

Here is your Trojan/Rootkit by the way, 2011-12-17 16:20:11 -------- d-----we C:\Windows\system64
Installed on December 17, 2011 at 5:20 PM

And DO NOT TRY to manually remove it because it cannot be done. That isn't even the real location of it.
Hopefully combofix will get it, I have seen it remove it before when other tools do not.

[KamikazeKarrot]

And DO NOT TRY to manually remove it because it cannot be done. That isn't even the real location of it.
Hopefully combofix will get it, I have seen it remove it before when other tools do not.

No worries there. I've come to the understanding that if there are special programs dedicated to deleting them, it's not going to be as easy as that to remove them.

I ran ComboFix, and it restarted the computer. It removed two files (consrv.dll and some .exe with "java" in the name) as well as the System64 file. Right now the computer is running a scan. It says the C: disk needs to be checked for consistency.