It was only a matter of time rootkits now effect 64bit OS

Funny read this post an hour ago, and half an hour ago had a machine that came in that comes up clean on every scan except AVG, which shows a virus attached to explorer, svchost, and one other windows system process. I found the rootkit in sys32/drivers and had already deleted it. But AVG was still tripping along with not being able to do windows updates. Saw on another forum talking about the exact same rootkit as this article, and to run tdsskiller from kaspersky, and it popped it out of the mbr. The infected machine was xp pro though, not anything x64
 
If anyone managed to capture the files, I'd love to infect a computer and have a go at removing...haven't encountered a 64bit rootkit yet...
 
I actually ran into this a few days ago,

I tried TDSS killer and it would not remove it from the MBR, so i did a little searching and discovered Hitman Pro. It did it in one scan (its a cloud scanner and fast as all can be) and 10 minutes later it was rootkit free.

I know it is listed somewhere on here, but here is a link

http://www.surfright.nl/en

It supports 32 and 64 bit, and I love it so far.
 
Back
Top