[Q] Help, Trojan "FURootkit" and "msdirectx.sys"

Egyptian · 2005-06-27 00:49:58

I'm just wondering if anyone has any problems with Rootkit Trojans. More specifically FU versions? And how they went about getting rid of them. I have searched, and searched, for well on a month now, with no luck. I've heard of many similar problems, and many, many 'possible' solutions, all of which have been tried, but to…

27-06-2005 01:49AM

#1

Egyptian

Registered Users, Registered Users 2 Posts: 352 ✭✭

Join Date: February 2005

Posts: 309

I'm just wondering if anyone has any problems with Rootkit Trojans.
More specifically FU versions? And how they went about getting rid of them.

I have searched, and searched, for well on a month now, with no luck.
I've heard of many similar problems, and many, many 'possible' solutions, all of which have been tried, but to no avail.

[Long story short]

The Trojan FURootkit creates the infected file "msdirectx.sys", McAfee detects the file and deletes it, but cannot seem to delete the Trojan itself. And after the created file is deleted, FURootkit creates it again, and again, and again......... about every 15 seconds.

[/Long story short]

It doesn't seem to have affected my PC performance in any way, yet it is quite annoying.
It can be easily ignored, but I would still like to get rid of it.

Any help, suggestions, or even comments would be greatly appreciated, especially from anyone who has experienced this problem first-hand.

Many Thanks

0

Comments

#2 27-06-2005 07:00AM

DonkeyStyle \o/

Closed Accounts Posts: 7,144 ✭✭✭ $DonkeyStyle \o/$

Join Date: October 2004

Posts: 6943

I recall a thread on the security forum with a linky to a rootkit revealer.
http://www.boards.ie/vbulletin/showthread.php?t=251499
I'm not sure if this app actually cleans the rootkit or simply tells you about it, but it's worth a look I'm sure. (if you haven't already that is.)

0
#3 27-06-2005 09:00AM

odie

Closed Accounts Posts: 364 ✭✭

Join Date: May 2005

Posts: 351

Found this great for removing all viruses and Trojans.

ewido security suite
http://www.ewido.net/en/download/

And here are updated Signature files.

http://www.ewido.net/en/download/updates/

I install it on any PC i get with Virus and adware problems, run it in safe mode and it hasn't failed me yet.

0
#4 27-06-2005 01:53PM

Wandering Dazed

Closed Accounts Posts: 78 ✭✭

Join Date: June 2005

Posts: 78

Egyptian wrote:

I'm just wondering if anyone has any problems with Rootkit Trojans.
More specifically FU versions? And how they went about getting rid of them.

I have searched, and searched, for well on a month now, with no luck.
I've heard of many similar problems, and many, many 'possible' solutions, all of which have been tried, but to no avail.

[Long story short]

The Trojan FURootkit creates the infected file "msdirectx.sys", McAfee detects the file and deletes it, but cannot seem to delete the Trojan itself. And after the created file is deleted, FURootkit creates it again, and again, and again......... about every 15 seconds.

[/Long story short]

It doesn't seem to have affected my PC performance in any way, yet it is quite annoying.
It can be easily ignored, but I would still like to get rid of it.

Any help, suggestions, or even comments would be greatly appreciated, especially from anyone who has experienced this problem first-hand.

Many Thanks

Have you tried

http://www.f-secure.com/blacklight/

Might do the job for you.

0