CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
| reply to icex _
Re: [Virus] Virus's and spyware!
Yuk! All of those files found by SDFix are really malicious rootkits and remote access trojans
Are are you aware of the complications and security risks of such a compromise?
What is a backdoor or remote access trojan?
Read this article.
Danger: Remote Access Trojans
»www.microsoft.com/technet/securi···rat.mspx
When should I re-format? How should I reinstall?
»Security »When should I re-format? How should I reinstall?
How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
»Security »How to report ID theft, fraud, drive-by installs, hijacking and malware?
Basically, your system has been compromised. Anyone may have had access to anything on your system or done whatever they want to it and hidden it from you. The rootkit makes it worse as your system is no longer trustworthy.
It's a trivial matter to clean up the rootkit itself, most rootkits and all botnet clients are Remote Access Trojans (RATs), and SDFIX has done that but....
A RAT is a program that allows a remote user to connect to the computer and issue commands.
Unless you can be sure that a remote user did not connect to the machine and run commands on it (which is almost always impossible to ascertain), you cannot know what damage the bad guy has done above and beyond installing the rootkit.
That unknown is what accounts for the recommendation to rebuild the machine.
--
It takes a disaster to make a woman out of a femaleMicrosoft MVP/Windows Security 2003-2007Proud Member of ASAP (Alliance of Security Analysis Professionals) |
·