Problems:
Data Send is more than received in network conncetion
services.exe is making more SMTP connections
Fix:
check netstat -bv to see the binaries which has established connections on network along with their ports. If you find anything suspicious kill the process(delete the exe if it is virus)
Use online virus scanners
I recommed running Combofix.exe.
Check this link to download and use Combofix
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Showing posts with label Hacking. Show all posts
Showing posts with label Hacking. Show all posts
Nov 4, 2009
Remove Generic Rootkit.g!rootkit virus from system
Symtoms:
This Rootkit is a very dangerous virus known for keylogger. so it can send your details and passwords without your knowledge.
Rootkit will be downloaded without you knowledge when you visit some less sucure sites. Antivirus like McAfee or IObit security are able to identify and clean but its not permanent.
Antivirus reports Rootkit files as
C:\WINNT\system32\drivers\synsenddrv.sys
and
C:\WINNT\system32\drivers\str.sys
Solution
Download and Install "Rootkit_Detective.exe" from http://download.cnet.com/
Run Rootkit_Detective.exe and after scanning it will ask you to reboot the system. Once you reboot it renames the virus files and solves the problem.
If you find this information helpful, please click the ads below
This Rootkit is a very dangerous virus known for keylogger. so it can send your details and passwords without your knowledge.
Rootkit will be downloaded without you knowledge when you visit some less sucure sites. Antivirus like McAfee or IObit security are able to identify and clean but its not permanent.
Antivirus reports Rootkit files as
C:\WINNT\system32\drivers\synsenddrv.sys
and
C:\WINNT\system32\drivers\str.sys
Solution
Download and Install "Rootkit_Detective.exe" from http://download.cnet.com/
Run Rootkit_Detective.exe and after scanning it will ask you to reboot the system. Once you reboot it renames the virus files and solves the problem.
If you find this information helpful, please click the ads below
Subscribe to:
Posts (Atom)