Rootkit infection requires Windows reinstall, says Microsoft
http://www.computerworld.com/s/artic...?taxonomyId=85
Printable View
Rootkit infection requires Windows reinstall, says Microsoft
http://www.computerworld.com/s/artic...?taxonomyId=85
There is a discussion about this over at dslreports. http://www.dslreports.com/forum/r260...says-Microsoft
Several feel the Microsoft approach has contradictions in it and may be an over reaction??
Looks like a good case for DBAN and doing a clean install alright.
Hope they figure out something better. :( :( :mad:
Thanks for the link HAN. Looks interesting.Quote:
Originally Posted by HAN
Yep, I hope so too.Quote:
Originally Posted by Train
--
CMRR - Secure Erase
(Better & faster than DBAN, Killdisk etc.?)
http://cmrr.ucsd.edu/people/Hughes/SecureErase.shtml
Read the enclosed .doc and .txt files
Where from you can get such a nasty ? Is there a way to prevent getting it ?
This nasty is a trojan. To quote McAfee:Quote:
Originally Posted by Ricardo Dávidow
Quote:
Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something beneficial. Distribution channels include IRC, peer-to-peer networks, newsgroup postings, e-mail, etc.
Thanks, HAN.
Quote:
Originally Posted by SpywareDr
Thanks, that is a new one to me.
You're welcome. :)
Does that work? Or is a fresh installl the only solution?Quote:
Feng provided links to MBR-fixing instructions for XP, Vista and Windows 7
If your back up image includes the MBR; why would you need to do a fresh install? Restoring the image would also restore the clean MBR. Am I not understanding something?
If the imaging program overwrites the MBR with either a clean one, it should work. (Of course, the option to overwrite the infected MBR should be explicit during the restore. Some imaging programs don't make this distinction and if it's not clear that it's being replaced, I don't think the user should make the assumption it has been replaced.)Quote:
If your back up image includes the MBR; why would you need to do a fresh install? Restoring the image would also restore the clean MBR. Am I not understanding something?
This is part of the reason I posted the link to the discussion over at dslreports. Several there felt the posting by MS was spreading at least some FUD. And to a degree, I think it is myself...
Since you are working on the DOS side one would think it would work, but no link(s), and again, how many folks even know what I am talking about?Quote:
Originally Posted by Steve R Jones
I agree. I like to have the entire drive cloned, which makes things easy if drive failure occurs.Quote:
Originally Posted by HAN