Computer seems to have a rootkit!!! but it wont die!!!?

4 thoughts on “Computer seems to have a rootkit!!! but it wont die!!!?”

1. Thomas Baker says:

   April 9, 2011 at 12:48 am

   Distributing these rootkits became as easy as passing along any other virus. The rootkits have been distributed through spyware downloads which are initiated when you click on ads, by downloading free software, and by opening e-mail attachments. One click is all it takes to start the damage.

   Some of these rootkits even found their way into the boot area of hard drives. That means that the technique many of us employ of rebooting our computers in order to clear out memory is no longer effective. These rootkits will simply restart every time the operating system restarts itself.

   And unfortunately many automated virus scanning programs, or antivirus software programs, are set up to scan only regular programs and not the boot sector. In the early days of viruses boot sectors viruses were common (because of floppy disk based infections) so anti-virus programs could protect against them. Then we stopped fitting floppy drives to computers so the need for boot sector protection went away.

   Once the rootkits are hidden in boot sectors it’s possible for it to become the program that controls many of the basic computer functions, and can control specific parts of the hardware itself.

   This makes it nearly impossible to install software that can combat the rootkit. Really, there’s nothing the virus can’t do; it can hide it’s workings from any application that is charged with checking for virus applications. It can even hide its efforts from the higher-level functions of the computer’s operating system.

   If your computer begins running funny, you might not suspect a rootkit, but instead assume that Windows is acting odd as it does now and then. Very few of us are going to be well-versed enough to suspect that a rootkit is, in fact, the cause of the problems. If you suspect your system might be infected with a rootkit then Google rootkit removers and you should find something to help you sort the problem out.

2. Colinc says:

   April 9, 2011 at 12:48 am

   Having done ANY manual changes, you have probably made it impossible for any tool to clean it up. NEVER use your installed security to fix these infections. Only a pure scanner outside of your normal active anti-virus can fix them. Avast is useless anyway with these. More danger than help. Malwarebytes used immediately in safe mode with networking would have fixed it. Provided you told it to fix all selected items when offered, and restarted immediately it requested a restart to prevent re-infection. You probably will now have to do a total re-install.

3. Dusty says:

   April 9, 2011 at 12:48 am

   Try latest version of AVG. Also install Spywareblaster as it could lock it in the host file and go to ZDNet and they may be able to help. At least you have a name to work off of. If you have Zonealarm you will have to turn it off to download AVG.

4. Jon says:

   April 9, 2011 at 12:48 am

   try this removal tool

   http://support.kaspersky.com/faq/?qid=208280888

   if that did not do it run

   Malicious Software Removal Tool

   1) Click on Start, Run
   2) Type MRT and Press Enter
   3) You’ll be presented with tool run

   if need help IM or Email

Comments are closed.