Help with 'Hacktool.Rootkit' virus thingy!

Allexie

Anyone any experience with the above virus thingy???

My Norton AV flagged it up...said 'access denied' and 'file could not be repaired'. Looked on the Symantec site and does not sound too good. Ran a full system scan and the virus showed...managed to quarantine it...ran scan again and showed as no viruses found. Does that mean all is OK now...I have a feeling it ain't gonna be that easy.....can anyone help please...panicking a bit!!!!?

gizmoleeds

I have had a few viruses in the past and know what a pain they can be.

Is the computer behaving oddly (eg. crashing (any more than usual), working slowly or bringing up error messages)?

If not then consider yourself lucky for that! My Norton has deleted a few viruses in the past and I have never had any trouble once Norton has told me the virus is gone. If it were still there then Norton would find it so you are probably safe.

Browntoa

if it is quarantined then you are fine

John_Gray

Depending on how technical you are, you could download and run the free RootkitRevealer from SysInternals. But, like HijackThis, you just get presented with a (long?) list of filenames and paths, etc, and it takes a fairly deep technical knowledge to know whether there is still a problem.

If you run it, and all the "Hacktool" files are in quarantine directories, and the Registry entries are no longer present, then you can presume that the problem has been sorted out. But don't become deeply worried about (for example!) cache entries for Firefox (which on my machine are apparently "not accessible via the Windows API" -- a favourite message from Rootkit Revealer).

If you still have a problem, Google for "hacktool rootkit remove" and see if any of the hits will help with a more complete removal.

John

Rickycowslip

out of interest - how do you think you got it ? I've used PCs extensively for years and never experienced a virus

Allexie

gizmoleeds wrote:

I have had a few viruses in the past and know what a pain they can be.

Is the computer behaving oddly (eg. crashing (any more than usual), working slowly or bringing up error messages)?

If not then consider yourself lucky for that! My Norton has deleted a few viruses in the past and I have never had any trouble once Norton has told me the virus is gone. If it were still there then Norton would find it so you are probably safe.

Well, so far so good...no odd behaviour...well, no more so than usual

Allexie

Browntoa wrote:

if it is quarantined then you are fine

Oh Gawd..please let that be the case!

Mr_Skint_2

Allexie wrote:

Oh Gawd..please let that be the case!

What Browntoa said....

I second that...... :T

Allexie

Rickycowslip wrote:

out of interest - how do you think you got it ? I've used PCs extensively for years and never experienced a virus

I honestly have no idea....must say I have indulged in the odd bit of, (cough, cough), illegal activity but was ages ago. I ran a full-system AV scan 2 days ago which was clean and have done nothing out of the ordinary since- so this came completely out of the blue!

brummybloke

just check your hard drive space and hope that by tomorrow it isnt halved. if it is, contact your isp and ask for a new ip. you will also find you now have lots of films/games/music/pron on your hard drive somewhere hidden. do a search for all things activated on todays date.

Allexie

brummybloke wrote:

just check your hard drive space and hope that by tomorrow it isnt halved. if it is, contact your isp and ask for a new ip. you will also find you now have lots of films/games/music/pron on your hard drive somewhere hidden. do a search for all things activated on todays date.

Oh oh...scared again now!!!!

Just checked hard drive space and seems pretty normal...
How do I check for things 'activated on today's date' (presumably yesterdays now?)