This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

rootkit infection [Solved]

11 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Noodle Tech, Thank you. This PC is used ONLY for internet, and has NO other data or programs that are vital. Would it be easier to just re-format the drive, and then re-install windows XP pro from the original disk? mkinaz
Hi mkinaz, In my opinion, yes it would be easier to reformat and reinstall, but you must be sure to delete that other hidden partition while in Windows setup. I would delete the 56GB partition that currently holds Windows XP, delete the 7.552 MB malicious partition, then create a new partition utilizing all the available disk space, then format it. Let me know what you decide to do. -NoodleTech
NT I deleted the 7mg partion, and the main 50+ partition, and am now createing a 57MG partition using NTFS. Is this correct? thanks, mkinaz
NT, I believe the setup program still indicated that there was 7mg of unpartitioned space, Does Win XP hold 7mg ? i deleted this, but I cant recal if it added this deleted into the one main new partition, or it remained as unpartitiooned, unformated space. Am I making sence? Thanks Mkinaz
Hi Mkinaz, Windows XP will leave about 8 MB of unallocated space (this is to allow you to convert the drive to a dynamic disk later on and is required). If you created a new partition using the maximum available space, you should be fine.
NT, I have wiped the drive and reinstalled W XP This PC is used by different people - and only for Internet browsing. I have little control to stop dangerous Web site browsing, Downloading is rare, but viewing of pics and video could bring a virus onto the machine I cant believe it lasted this long. In the past, I used AVG, then AVAST, and Malwarebytes PRO - to catch viruses, and through MWB Pro - prohibiting browsing to dangerous sites… But this stil happened… Can you recommend inexpensive or free-ware security SW that will prevent this and other nasty things from happening again? (in addition to MWB Pro and AVAST free version?) thank you, mkinaz
Hi mkinaz,

AVAST is a great free antivirus. Malwarebytes PRO is good as well. I personally use Microsoft Security Essentials. It gets the job done and uses minimal resources.

Besides that, be sure to keep your system up to date (Windows updates, Java, Adobe Reader, Flash, etc).

I would also consider a third party browser such as Google Chrome or Firefox with an add-on like NoScript (which blocks all sorts of scripts from executing when browsing the web).

You might also want to consider running the web browser inside a "sandbox" so that changes cannot be made to the system. Sandboxie is a good program for this.

Below is the speech I normally give after cleaning a computer. You may find the tips helpful.

Here are some tips to reduce the potential for spyware infection in the future:

Updates
  • It is very important that you keep your Operating System and applications up to date so that you will be less susceptible to malware.
  • It's a good idea to have Windows Update automatically download and install updates as they become available.
  • Secunia Online Software Inspector is a great tool that will tell you which of your applications are outdated and vulnerable to attack.
Run Anti-Virus Software
  • For an excellent list of free anti virus software, free online virus scanners, free spyware detection/removal and free firewalls, click here.
  • IMPORTANT! Please make sure you only have ONE firewall and ONE real-time antivirus installed on your system.
  • When using "on demand" scanners, first update the detection signature files, then disconnect from the internet and disable your resident security program before running the scan.
  • Once complete, remember to re-engage your resident security before going online.
Passwords
  • It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection.
  • Refer to this Microsoft article
    Strong passwords: How to create and use them and consider a password keeper, to keep all your passwords safe.
Spyware Protection
  • This is a good time to set up protection against further attacks. In light of your recent problem, I'm sure you'd like to avoid any future infections. Please read these well written articles:
  • How to Prevent Malware by miekiemoes
  • PC Safety and Security–What Do I Need?
Additional Software
  • To help protect your computer in the future I recommend that you get the following free programs if you do not already have them:
  • SpywareBlaster prevents the installation of ActiveX-based malware, blocks cookies, and restricts the actions of "bad" sites. See tutorial here
  • MVPS HOSTS FILE replaces your current HOSTS file with one that will restrict known ad sites from serving you unsolicited advertisements.
  • Google Chrome is a great alternative to Internet Explorer and Firefox.
Follow these steps, keep your antivirus program and antispyware programs updated, and scan with them on a regular basis. By doing so, your potential for being infected again will reduce dramatically. 

Hopefully this should take care of your problems! Good luck.

Do you have any further questions? 

**Please respond one more time to confirm your problem is resolved so I can close this thread.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI