Remove-Malware.com » Malware http://remove-malware.com Antivirus Reviews For 2011 / 2012, Tools and How To's Mon, 14 May 2012 20:56:29 +0000 en hourly 1 http://wordpress.org/?v=3.3.2 Removing Rootkit.Boot.SST.a leaves you with unbootable Windows 7http://remove-malware.com/malware/rootkits/removing-rootkit-boot-sst-a-leaves-you-with-unbootable-windows-7/ http://remove-malware.com/malware/rootkits/removing-rootkit-boot-sst-a-leaves-you-with-unbootable-windows-7/#comments Mon, 14 May 2012 20:56:29 +0000 malwarekilla http://remove-malware.com/?p=3442 Last night I had to deal with one very nasty rootkit.   It’s called Rootkit.Boot.SST.a.  Removing the rootkit is pretty easy (used the kaspersky rescue disk), however after it’s removed Windows 7 becomes unbootable and you’re left with a 0x0000007b.    If you try to use a Windows 7 disc to repair the mbr using bootrec.exe [...]

Thanks for reading the feed for Remove-Malware.com !!! This post was originally published here: Removing Rootkit.Boot.SST.a leaves you with unbootable Windows 7

]]> http://remove-malware.com/malware/rootkits/removing-rootkit-boot-sst-a-leaves-you-with-unbootable-windows-7/feed/ 5 Picture of Rootkit that Prevents Windows 7 from Loadinghttp://remove-malware.com/malware/rootkits/picture-of-rootkit-that-prevents-windows-7-from-loading/ http://remove-malware.com/malware/rootkits/picture-of-rootkit-that-prevents-windows-7-from-loading/#comments Thu, 26 Apr 2012 15:09:52 +0000 malwarekilla http://remove-malware.com/?p=3405

Following up on my last post, here’s a picture of the rootkit that causes Windows 7 to lockup / freeze.

Thanks for reading the feed for Remove-Malware.com !!! This post was originally published here: Picture of Rootkit that Prevents Windows 7 from Loading

]]> http://remove-malware.com/malware/rootkits/picture-of-rootkit-that-prevents-windows-7-from-loading/feed/ 4 Rootkit Causes Windows Not To Boot – Freezes at Windows Load Screenhttp://remove-malware.com/malware/rootkits/rootkit-causes-windows-not-to-boot-freezes-at-windows-load-screen/ http://remove-malware.com/malware/rootkits/rootkit-causes-windows-not-to-boot-freezes-at-windows-load-screen/#comments Thu, 26 Apr 2012 14:20:32 +0000 malwarekilla http://remove-malware.com/?p=3401 Hi Guys,  just an FYI here.  I’ve had 3 rootkits this week that prevent Windows 7 from loading.  Basically when you start the PC Windows starts to load and then freezes on Windows screen (black background, before the colored spinning balls). This is easy to resolve.  Just download the latest Kaspersky Rescue Disk, burn the [...]

Thanks for reading the feed for Remove-Malware.com !!! This post was originally published here: Rootkit Causes Windows Not To Boot – Freezes at Windows Load Screen

]]> http://remove-malware.com/malware/rootkits/rootkit-causes-windows-not-to-boot-freezes-at-windows-load-screen/feed/ 1 Rootkit Zero Access Removal Noteshttp://remove-malware.com/malware/rootkits/rootkit-zero-access-max-notes/ http://remove-malware.com/malware/rootkits/rootkit-zero-access-max-notes/#comments Tue, 27 Dec 2011 15:51:05 +0000 malwarekilla http://remove-malware.com/?p=3274 This post is split up in a few sections.  It’s mostly my notes on dealing with rootkit zero access (a.k.a – rootkit.zeroacess, w32/Sirefef or Max++) Methods of Infection for Rootkit Zero Access (max++) Outdated Java (this seems to be the #1 way) .exe’s that have random porn type names.  They are made to look like [...]

Thanks for reading the feed for Remove-Malware.com !!! This post was originally published here: Rootkit Zero Access Removal Notes

]]> http://remove-malware.com/malware/rootkits/rootkit-zero-access-max-notes/feed/ 37 TDL4 Rootkit Video – Being Used as a Proxyhttp://remove-malware.com/malware/rootkits/tdl4-rootkit-video-being-used-as-a-proxy/ http://remove-malware.com/malware/rootkits/tdl4-rootkit-video-being-used-as-a-proxy/#comments Tue, 12 Jul 2011 15:44:34 +0000 malwarekilla http://remove-malware.com/?p=2807 In this video you get to see how the TDL4 rootkit uses your PC as a proxy server.  The tools used in this video are Comodo Cleaning Essentials and the Windows Task Manager.  

Thanks for reading the feed for Remove-Malware.com !!! This post was originally published here: TDL4 Rootkit Video – Being Used as a Proxy

]]> http://remove-malware.com/malware/rootkits/tdl4-rootkit-video-being-used-as-a-proxy/feed/ 54 Searching Online Whitepages Often Leads To Rogue Antivirus…or Worsehttp://remove-malware.com/malware/malware-warnings/searching-online-whitepages-often-leads-to-rogue-antivirus-or-worse/ http://remove-malware.com/malware/malware-warnings/searching-online-whitepages-often-leads-to-rogue-antivirus-or-worse/#comments Tue, 07 Dec 2010 20:02:27 +0000 malwarekilla http://remove-malware.com/?p=2461

I’m often curious on how my clients become infected.  What websites they visited, what they were searching for and of course what kind of protection they had on their computer.   After taking notes for a month it seams that 75% of the clients infected with rogue (fake) anti-virus first observed the rogues infecting their [...]

Thanks for reading the feed for Remove-Malware.com !!! This post was originally published here: Searching Online Whitepages Often Leads To Rogue Antivirus…or Worse

]]> http://remove-malware.com/malware/malware-warnings/searching-online-whitepages-often-leads-to-rogue-antivirus-or-worse/feed/ 4 How the TLD4 Rootkit Bypasses Driver Signing on Windows 64-bithttp://remove-malware.com/malware/malware-news/how-the-tld4-rootkit-bypass-driver-signing-on-windows-64-bit/ http://remove-malware.com/malware/malware-news/how-the-tld4-rootkit-bypass-driver-signing-on-windows-64-bit/#comments Mon, 15 Nov 2010 18:41:58 +0000 malwarekilla http://remove-malware.com/?p=2436 Per the Sunbelt Blog: Microsoft’s Windows operating system, running on a 64-bit machine provides enhanced security with driver signing of system and low level drivers. This policy, called the kernel mode code signing policy, disallows any unauthorized or malicious driver to be loaded [1]. The TDL4 rootkit bypasses driver signing policy on 64-bit machines by [...]

Thanks for reading the feed for Remove-Malware.com !!! This post was originally published here: How the TLD4 Rootkit Bypasses Driver Signing on Windows 64-bit

]]> http://remove-malware.com/malware/malware-news/how-the-tld4-rootkit-bypass-driver-signing-on-windows-64-bit/feed/ 14 Kaspersky Website Serves Up Malwarehttp://remove-malware.com/malware/malware-news/kaspersky-website-serves-up-malware/ http://remove-malware.com/malware/malware-news/kaspersky-website-serves-up-malware/#comments Wed, 20 Oct 2010 17:32:41 +0000 malwarekilla http://remove-malware.com/?p=2412 My first reaction to this was….”oooooo….that’s bad”.  Anyway, check out the article. http://www.examiner.com/technology-in-national/security-firm-kaspersky-serves-up-malware-from-its-site

Thanks for reading the feed for Remove-Malware.com !!! This post was originally published here: Kaspersky Website Serves Up Malware

]]> http://remove-malware.com/malware/malware-news/kaspersky-website-serves-up-malware/feed/ 1 Combofix Not As Effective As It Once Washttp://remove-malware.com/malware/malware-notes/combofix-not-as-effective-as-it-once-was/ http://remove-malware.com/malware/malware-notes/combofix-not-as-effective-as-it-once-was/#comments Sat, 06 Feb 2010 22:51:12 +0000 malwarekilla http://remove-malware.com/?p=1990 I don’t know if anyone else has noticed but for the last 2-3 weeks Combofix has been more or less….a waste of time, in fact I just had to resort to my UBCD4Win on every malware appointment.  The latest round of rootkits seem to be evading it rather well. Also, I’ve really had to rely [...]

Thanks for reading the feed for Remove-Malware.com !!! This post was originally published here: Combofix Not As Effective As It Once Was

]]> http://remove-malware.com/malware/malware-notes/combofix-not-as-effective-as-it-once-was/feed/ 3 Microsoft Security Essentials – Rootkit Followup Videohttp://remove-malware.com/malware/rootkits/microsoft-security-essentials-rootkit-followup-video/ http://remove-malware.com/malware/rootkits/microsoft-security-essentials-rootkit-followup-video/#comments Thu, 10 Dec 2009 18:07:16 +0000 malwarekilla http://remove-malware.com/?p=1953 In this followup video to the Microsoft Security Detection and Removal tests video I show you what rootkit was present on the PC, what apps couldn’t even detect it and what finally removed it. http://www.youtube.com/watch?v=aRfnBjTCG4I

Thanks for reading the feed for Remove-Malware.com !!! This post was originally published here: Microsoft Security Essentials – Rootkit Followup Video

]]> http://remove-malware.com/malware/rootkits/microsoft-security-essentials-rootkit-followup-video/feed/ 5