Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

i recently ran a "netstat" command on my windows xp system, and saw some connections to "Iron.Skynet". well Iron is my Computers Name, but ive not come across the name "Skynet" on my system before.

Worried that i had a malware or virus infection, i did a search of the filesystem for "skynet" and didnt find anything, but then i did a search in the registry for "Skynet" and found the following: in the branch named: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ theres a value named "DhcpDomain" and its value is "Skynet"

does anyone know what this is all about? should i be worried? ive run various virus scanners and none of them found anything.

share|improve this question
    
late to the conversation, just curious what AV software did you have prior to doing all the suggest items? Also do you surf the net with admin privs or not? If you follow all the suggestions below and still run/surf as administrator you'll infected again in no time flat! –  user33788 Jun 28 '10 at 19:00

1 Answer 1

up vote 10 down vote accepted

Skynet is a rootkit, not good. It is difficult to detect and remove.

  1. Download and run Stubware http://www.thestubware.com/malware_removal/skynet/

After you have rebooted to remove the skynet driver with Stubware, download and run MBAM, do a full system scan, when it is done scanning, allow it to remove anything it finds.

2 . Download, install and Update MBAM twice, then scan. http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

MBAM Does Not provide Active protection, it only scans when you run it.

Stubware does provide active protection if you wish, if you do not want it, remove stubware after it has removed skynet, use add/remove programs.

.

.

share|improve this answer
    
thanks for the advice!!!! –  mack nordstrum Jun 28 '10 at 2:12
    
You are welcome. –  Moab Jun 28 '10 at 2:16
    
i tried running stubware. but it seems a bit confusing. there are a few hundred checkboxes displayed after the scan finished. how do i know which ones to tick before i click Fix? –  mack nordstrum Jun 28 '10 at 2:19
    
Don't do anything yet –  Moab Jun 28 '10 at 2:32
    
btw out of curiosity why do you need to install and run mbam twice –  mack nordstrum Jun 28 '10 at 2:33

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.