Skip to Content.
Sympa Menu

internetworkers - Re: [internetworkers] question about hacktool.rootkit

internetworkers AT lists.ibiblio.org

Subject: Internetworkers: http://www.ibiblio.org/internetworkers/

List archive

Chronological Thread  
  • From: hallman <hallman AT email.unc.edu>
  • To: "Internetworkers: http://www.ibiblio.org/internetworkers/" <internetworkers AT lists.ibiblio.org>
  • Subject: Re: [internetworkers] question about hacktool.rootkit
  • Date: Tue, 31 Aug 2010 15:29:40 -0400


> Did this just show up after the Monday definition file came through or
> did it show up before that?

Before the Monday definition.

I really screwed up the machine a couple of weeks ago when I accidentally
clicked Antimalware Doctor and didn't shut down the machine fast enough. It
installed. I got some help to get rid of Antimalware Doctor. That was a
mistake. For a few days, Symantec was not installed. I got that back on.
Found out I still had Antimalware Doctor, was getting ocassional popups,
and Internet access was _REAL_ slow. If my machine was off, my husband's
machine accessed the Internet fine. Looking at my wireless network, it was
continuously sending and receiving packets. So I followed
bleepingcomputer.com instructions for getting rid of Antimalware Doctor and
ran Symantec scans. On Aug 29 it found and quaratined or deleted 7 problems
-- Trogan.Gen, Bloodhound.MalPE and Trojan Fake. I ran the scan several
times yesterday and once more today. I've had it on and off the Internet
and wondered if it was getting reinfected from the Internet. Last time I
had it on the Internet, the problem of sending and receiving packets was
gone.

So now I'm down to only the one file, but it has shown up for the last few
scans.

I could take it in to the UNC IT Response Center and have the C drive
reimaged if I have to. My data is on the D drive and I have backups for it.

Judy




Archive powered by MHonArc 2.6.24.

Top of Page