Backdoor.HackDefender

ok, i am confused and my boss is not helping me because he is busy, do u think u can explain what this rootkit stuff is? and maybe help me understand what to do if f-secure finds syslog.exe? because it is telling me to rename it or something?????

obviously u can tell im confused. Please help me!
 
daygowop said:
ok now i have been reading a lot of articles that tell me to just delete syslog.exe.
Click to expand...
The problem is additional files may exist on the infected system all in the system 32folder, (syslog.exe.) is created because of the virus.

This is a real nasty...To detect it, try the following program: http://www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml

To clean it your best bet would be to connect your disk as a slave drive to another machine and try removing all the files that were found by RootkitRevealer.
 
Last edited:
Well, the syslog.exe is gone and f-secure worked. i must thank you guys one last time for your help and efforts. The server is back-up and running. This is why I love CF!
 
Excellent.

Sometimes the cleaning works the first time around, other times a few other tools are needed. Glad your back in business.Thanks for letting us know.
 
You must log in or register to reply here.
Back
Top