Live Chat & Podcast at 1:00PM Eastern on Sunday!
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
General Security
Tag Cloud
access acer asus bios bsod computer crash desktop dns driver drivers error ethernet excel freeze gaming graphics hard drive hardware hdmi internet laptop malware memory monitor motherboard network printer problem ram registry repair router slow software sound trojan ubuntu 11.10 uninstall usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
Feedback Please?

Reply  
Thread Tools
spirittoo's Avatar
Member with 349 posts.
 
Join Date: Sep 2002
13-Jan-2008, 03:15 PM #1
Question Feedback Please?
Hi I just got through reading this article and I would like some feed back on it ... should the fix be downloaded and installed or do we in USA have nothing to worry about ...

Thanks in advance ...


Warning on stealthy Windows virus
Once installed the virus, dubbed Mebroot by Symantec, usually downloads other malicious programs, such as keyloggers, to do the work of stealing confidential information.
__________________
P4 2.66Ghz Intel D84GRG mobo WinXP Pro/7U
PC 2100 DDR 1280Mb Hercules P/S 400W
NVIDIA GeForce FX 5200
rainforest123's Avatar
Distinguished Member with 6,632 posts.
 
Join Date: Dec 2004
Experience: Advanced
13-Jan-2008, 05:44 PM #2
Most users in most countries share the same risks. I don't know why living in the US of A would protect us.

RF123
TOGG's Avatar
Distinguished Member with 5,362 posts.
 
Join Date: Apr 2002
Location: Birmingham, England
13-Jan-2008, 05:45 PM #3
I'm no expert on this stuff but I have seen other items about malware that attacks the MBR, something that seemed much more common when floppy disks were in general use. The BBC's standard of reporting on these issues is usually quite good but, as with any news organisation, they are only passing on other people's opinions/theories.

The key point, as with so many other potential exploits or threats, is the use of Internet Explorer "Many are falling victim via booby-trapped websites that use vulnerabilities in Microsoft's browser to install the attack code." The Department of Homeland Security (and many others) issued advice some time ago that people should use alternative browsers, and I have never seen anything to suggest that that advice has been changed.

I have most of the Internet Zone options in IE disabled and use Opera for everyday browsing and Firefox (with the IETab extension) to collect Windows Updates. I am not claiming that either of these browsers is in any way immune from attack, they just don't have the same level of weakness.

The fact that this exploit, like so many others, appears to be Russian, does not mean that the Atlantic or Pacific oceans provide any sort of immunity! I have never heard of GMER and so have no opinion as to the usefulness of their removal tool.
__________________
Nothing matters very much, and few things matter at all.

Lord Balfour 1848-1930
rainforest123's Avatar
Distinguished Member with 6,632 posts.
 
Join Date: Dec 2004
Experience: Advanced
13-Jan-2008, 05:52 PM #4
http://www.gmer.net/index.php

It is frequently used, at the malware detection & removal forum of Tech Guy

RF123
spirittoo's Avatar
Member with 349 posts.
 
Join Date: Sep 2002
13-Jan-2008, 06:38 PM #5
Thanks for the link ... I found this.

Would any of you use this or any of their fix for this?

Should it be used is really the question ...
TOGG's Avatar
Distinguished Member with 5,362 posts.
 
Join Date: Apr 2002
Location: Birmingham, England
13-Jan-2008, 07:24 PM #6
I find the whole rootkits thing very confusing. I understand that legitimate apps, such as antivirus and firewalls, need to 'hook' processes to check them, but that could be considered to be rootkit type behaviour.

Whatever, the GMER, or any similar tool, will only help after you have been infected with a rootkit. If not using IE will improve your chances of avoiding infection in the first place, that would seem to be the logical place to start.

You can't uninstall IE, so it will always be there for those badly constructed sites that will only work with it.
__________________
Nothing matters very much, and few things matter at all.

Lord Balfour 1848-1930
Gizzy's Avatar
Computer Specs
Library Manager with 3,671 posts.
 
Join Date: Aug 2005
Location: NJ, USA
Experience: Comp Security Enthusiast
14-Jan-2008, 04:34 AM #7
GMER is very good at detecting and removing rootkits the only problem is for it to be effective you have to know what you're doing GMER isn't for beginners.
spirittoo's Avatar
Member with 349 posts.
 
Join Date: Sep 2002
14-Jan-2008, 01:14 PM #8
Can you give me an idea of what some of the things are that I need to know? Thanks
Gizzy's Avatar
Computer Specs
Library Manager with 3,671 posts.
 
Join Date: Aug 2005
Location: NJ, USA
Experience: Comp Security Enthusiast
15-Jan-2008, 03:11 AM #9
Quote:
Originally Posted by spirittoo View Post
Can you give me an idea of what some of the things are that I need to know? Thanks
it scans for hidden objects or objects that place system hooks on your pc,
Quote:
Originally Posted by from gmer's site
It scans for:
# hidden processes
# hidden threads
# hidden modules
# hidden services
# hidden files
# hidden Alternate Data Streams
# hidden registry keys
# drivers hooking SSDT
# drivers hooking IDT
# drivers hooking IRP calls
# inline hooks
so after you scan with gmer it'll find hidden objects and programs with system hooks but not everything it finds will be a rootkit so you have to know what to remove and what to leave,

though you could probably search google for anything that you don't recognize.

hope this helps.
__________________
Graduate of Malware Removal University | Member of ASAP and UNITE
Help Add Content At The Official Tech Support Guy Library Of Knowledge!
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 09:47 PM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.