Comments on: Can’t get rid of the SKYNET trojan? http://technicians-blog.kingcomputer.com.au/cant-get-rid-of-the-skynet-trojan/ Tech tips, news and interesting stuff Fri, 30 Jul 2010 05:30:29 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: DaChew http://technicians-blog.kingcomputer.com.au/cant-get-rid-of-the-skynet-trojan/comment-page-1/#comment-53 DaChew Sat, 04 Jul 2009 03:22:27 +0000 http://technicians-blog.kingcomputer.com.au/?p=646#comment-53 Killing the core active files, not cleaning orphaned registry entries is the method used by MBAM http://www.mvps.org/winhelp2002/unwanted.htm Spybot is not a good example Killing the core active files, not cleaning orphaned registry entries is the method used by MBAM

http://www.mvps.org/winhelp2002/unwanted.htm

Spybot is not a good example

]]> By: Brendan King http://technicians-blog.kingcomputer.com.au/cant-get-rid-of-the-skynet-trojan/comment-page-1/#comment-52 Brendan King Fri, 03 Jul 2009 21:12:47 +0000 http://technicians-blog.kingcomputer.com.au/?p=646#comment-52 Sophos was able to get rid of the .sys infections OK, but nothing could remove the registry entries until I manually reset the permissions. Will malware bytes reset the permissions, or do the same thing as search and destroy and say it has cleaned the registry without actually doing it? My method was not that hard but did require being able to run av on the drive from a seperate bootable system to stop the loads. Sophos was able to get rid of the .sys infections OK, but nothing could remove the registry entries until I manually reset the permissions. Will malware bytes reset the permissions, or do the same thing as search and destroy and say it has cleaned the registry without actually doing it? My method was not that hard but did require being able to run av on the drive from a seperate bootable system to stop the loads.

]]> By: DaChew http://technicians-blog.kingcomputer.com.au/cant-get-rid-of-the-skynet-trojan/comment-page-1/#comment-51 DaChew Fri, 03 Jul 2009 13:42:35 +0000 http://technicians-blog.kingcomputer.com.au/?p=646#comment-51 That's the hard way to attack this rootkit http://www.malwarebytes.org/forums/index.php?showtopic=12709 That’s the hard way to attack this rootkit

http://www.malwarebytes.org/forums/index.php?showtopic=12709

]]>