The rootkit tag has no wiki summary.
1
vote
0answers
86 views
XP comes up with black screen and mouse cursor only [closed]
Possible Duplicate:
Black Screen on Startup even after running chkdsk
My computer caught a rootkit, and after many hours of trying to remove the infection I thought I would just do a repair ...
0
votes
0answers
36 views
Ubuntu 10.04 LTS AMD64 server stuck when booting
I totally can't figure out any way now.
I manage a server which runs Ubuntu 10.04 LTS AMD64. Several days ago, another sysadmin tried rebooting the machine and it never boot up again.
I'm sure that ...
3
votes
1answer
43 views
Can signature verification expose a rootkit?
I know that rootkits operate as part of the kernel, driver or service running on the system, injecting themself into DLLs or installing as a legitimate applications.
If I were to scan the system with ...
-1
votes
1answer
57 views
Deleting content in swap space and emptying cache using terminal in linux
Wish a script which would delete cache content and remove additional files which have been downloaded via the internet and saved voluntarily by the user and files any thing other than those used by ...
46
votes
6answers
2k views
My webcam just came on “out of the blue”
I have a Microsoft LifeCam HD sitting atop my monitor. Today, completely out of the blue, its light came on -- I was simply browsing the web (in Chrome) when it happened. After about 5 minutes the ...
2
votes
3answers
940 views
rootkit: Avast says it deletes it, but it detects it every time I boot up. How do I get rid of this?
After cleaning up the majority of my malware infestation with Process Explorer and Autoruns I am relying on Avast antivirus to clean up the rest. It continues to find a rootkit described as follows:
...
1
vote
2answers
106 views
Examples of usable rootkits
I'm trying to learn more about rootkits and was hoping to take one and let it loose in a virtual environment.
Does anyone know of a rootkit currently available that I can safely use to do this, and ...
0
votes
1answer
181 views
Reality of a Windows Vista “recovery disk” virus?
I recently borrowed a disk from a guy I don't really know. It was a Windows Vista install disk (lost my old one, and needed to reformat). The disk was a copy of the original, and I was wondering how ...
4
votes
4answers
271 views
Strange phishing attack?
When I login to wachovia/wells fargo/amazon/paypal , no matter the user/pass that I insert, i get a "we need to verify your information" page where they ask me everything, from the atm pin to my ssn ...
2
votes
1answer
259 views
Windows-7 system files integrity
Is there a tool that will check integrity of system files in Win7 and search for invalid or changed ones. I would like to find which files were changed by rootkit installed on system. It would be nice ...
1
vote
3answers
213 views
Is there some file browser that uses low level functions to browse hard disk?
I have Windows 7, NTFS hard disk. I have detected rootkit files but can't delete them through Windows explorer, obviously because they are not visible. Is there some other file browser that is using ...
1
vote
1answer
237 views
What is 1UnHooker.sys?
I'm still searching for a solution to my problem as I stated in my previous question (UAC being turned off every time Windows 7 starts (once a day)). Today, a program called SpyHunter found an unknown ...
5
votes
6answers
1k views
UAC being turned off once a day on Windows 7
I have strange problem on my HP laptop. This began to happen recently. Whenever I start my machine, Windows 7 Action Center displays the following warning:
You need to restart your computer for
...
1
vote
1answer
1k views
Suspicious drivers, is it a rootkit?
The following entries show up in DriverView on my PC:
C:\Windows\System32\Drivers\dump_dumpata.sys
C:\Windows\System32\Drivers\dump_dumpfve.sys
C:\Windows\System32\Drivers\dump_msahci.sys
These ...
1
vote
2answers
2k views
Removing a rootkit from the MBR.. without formatting?
I have run hitman pro and found 'traces of the TDL3 Alureon' rootkit on the computer. However, running TDSSKiller would of solved this issue - but - apparently the symptoms keep coming back so I ...
0
votes
1answer
1k views
Correcting hijacked search in Chrome from “resultdns.com”?
Potentially unnecessary background: I was a Sloppy Internet User today and downloaded an unsafe file without realizing my virus-protection software was offline. I noticed suspicious behavior from my ...
2
votes
1answer
220 views
Linux workstation: how to know if it has been rooted?
I was working on my Linux "workstation" (it has no sound and I don't play on it nor watch any movie: it's purely a work-machine, hence I call it my "workstation") and suddenly something very weird ...
1
vote
3answers
703 views
Problem tracking down virus - services.exe port 443 and svchost.exe ports 25 + 80
Hey, I'm running an XP SP3 system with all the latest updates. It seems I have a virus and I'm having a hard time tracking it down.
I have some outbound connections; services.exe connects to some ...
1
vote
1answer
350 views
I can't edit /etc/init.d/rc.sysinit as local - vi says it's [readonly]
I have a rootkitted SUSE Linux and I'm trying to fix it. I have root privileges but when I go:
cd /etc/init.d
vi rc.sysinit
vi tells me the file is [readonly]. The owner of the file is root.root ...
0
votes
1answer
151 views
System restarting after pressing scan on rootkit revealer
My pc is affected with sality virus and after lot of investigation i could get to permanently enable regedit and taskmanager and clean infected files. But i wanted to remove it from the core so i used ...
1
vote
4answers
456 views
Kernel Mode Rootkit
On the other 3 computers in my family, I believe that we have a kernel-mode rootkit for windows.
It appears that the same rootkit is on all of them. We think.
We changed all the important passwords ...
1
vote
3answers
831 views
how to stop a driver from running - it self protected and rootkit hidden
I have this serous problem
For the first time I can not stop a program from running.
Something is on one laptop computer that is run as system legacy driver, and self protected and hidden on ...
1
vote
2answers
450 views
Computer is broadcasting on port 139 at startup - Virus?
Maybe this isn't the right forum to ask this question, but here it goes. Whenever I boot my vista machine, right after login there has been an extended delay until the actual desktop appears. I also ...
3
votes
4answers
401 views
Measures when routinely checking security on a home Ubuntu server
I use an old Mac mini with latest Ubuntu server to have a "home Gmail": with minimal time spent on configuration I have my webserver with wiki, mail server etc. (and no Google Ads)
All ports not used ...
2
votes
5answers
252 views
How to get a free full anti malware coverage on windows?
There are many specialized anti malware applications, namely:
Anti-virus
Anti-spyware
Anti-malware
Anti-rootkit
And so on. What combination of free Windows tools would protect me from any sort of ...
2
votes
2answers
187 views
External rootkit detection software?
The trouble with any rootkit detection software is that if the rootkit is really good, it will work to hide traces of itself from the detecting software as well.
I imagine that rootkits could be ...
2
votes
3answers
13k views
Is there a way to find rootkits on 64-bit Windows 7
I was at work and got a help desk call about a rather severe malware infection and it got me thinking about my own computer.
I am running Windows 7 64-bit RC1 on my everyday laptop. I run ESET ...
5
votes
6answers
1k views
BIOS root kit? Or, how do I fresh install a clean BIOS?
So I was installing questionable operating system onto my EEE pc and it required me to downgrade the BIOS which I really am not an expert at. I used a patch and it appeared to work.
Now, I'm paranoid ...
2
votes
7answers
4k views
How can I remove Rootkit.TDSS?
Is there a good way to wholly remove Rootkit.TDSS? Malwarebytes and Spyware Doctor both detect it on an old XP machine I have. Malwarebytes says it's removing it, but when I reboot and rescan, it ...
3
votes
8answers
2k views
Which rootkit cleaner do you recommend for Windows XP?
Answering the question "Task Manager shows 100% CPU utilization, but nothing in process list does.", Paul Woodward stated that his problem with 100% CPU was a rootkit infecting his computer. My ...
0
votes
2answers
373 views
What else besides a virus would keep turning on “Show Hidden Files” in WinXP
I've got a couple of machines that definitely recently had viruses and very likely still do.
I've run Norton AV, Radix RootKit remover, Sophos Rootkit remover, Spybot, Ad-Aware, CA Antivirus Plus, ...
3
votes
2answers
287 views
OS X rootkit/spyware scanners?
For OS X, I have discovered Rootkit Hunter recently and liked the functionality. What other rootkit/spyware scanners for os x have been developed that are available for use?
1
vote
3answers
919 views
RootKit Hunter Warnings on Mac OS X
Just executed rkhunter on my new MBP which runs a freshly installed Mac OS X and I get the following warnings:
Checking for passwd file changes [ Warning ]
Checking ...
