Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 help and support Forum Windows 8 Forum Vista Tutorials

Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroup Archive > Vista Newsgroups > Vista security

Vista - Rootkit

 
 
03-10-2008   #1 (permalink)


Vista Home Premium 32bit
 
 

Rootkit

Hi
Today i scanned my system and got the following notification.
"The On-Demand Scan found alterations to code or data which may indicate that a rootkit is attempting to hide files, registry keys, processes or other items. If this scan fails to find anything then the computer should be scanned with McAfee PreScan or booted into Safe Mode and this scan run again"

What is the problem and what should i do now?
Please guide me.
Thanks

My System SpecsSystem Spec
03-10-2008   #2 (permalink)
Jeff Smith [MSFT]


 

RE: Rootkit

It sounds like your antivirus program has found evidence of a serious kind of
virus. You may be able to fix it by following the instructions that came
with your virus scanner. However, it's not always possible to recover an
infected computer. The safest course of action is to back up all your
documents and re-install Windows.

I'd strongly suggest that you not use that computer for internet banking or
other "secure" stuff.


"ssplal" wrote:
Quote:

>
> Hi
> Today i scanned my system and got the following notification.
> "The On-Demand Scan found alterations to code or data which may
> indicate that a rootkit is attempting to hide files, registry keys,
> processes or other items. If this scan fails to find anything then the
> computer should be scanned with McAfee PreScan or booted into Safe Mode
> and this scan run again"
>
> What is the problem and what should i do now?
> Please guide me.
> Thanks
>
>
> --
> ssplal
>
My System SpecsSystem Spec
03-10-2008   #3 (permalink)
Malke


 

Re: Rootkit

ssplal wrote:
Quote:

>
> Hi
> Today i scanned my system and got the following notification.
> "The On-Demand Scan found alterations to code or data which may
> indicate that a rootkit is attempting to hide files, registry keys,
> processes or other items. If this scan fails to find anything then the
> computer should be scanned with McAfee PreScan or booted into Safe Mode
> and this scan run again"
McAfee isn't very good (and I'm being polite about it by saying only that).
It would be wise to scan with another antivirus/malware product to get a
"second opinion" first before you panic. I'd use David Lipman's Multi_AV:

http://www.elephantboycomputers.com/...moving_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

If McAfee reported a particular file as the rootkit, you can also send it to
Virus Total for identification.

http://www.virustotal.com/

If your alternate scan comes up clean, I'd consider replacing McAfee with a
betteer security solution such as NOD32, Kaspersky, or even Avast if you
want something free.

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!
My System SpecsSystem Spec
 

 Rootkit problems?



Thread Tools


Similar topics to: Rootkit
Thread Forum
Rootkit Revealer Vista security
please help - rootkit problem System Security
Rootkit help PLEASE!!! Vista General
Rootkit Vista General
How do I get rid of a rootkit Vista security


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50