Comments on: Kindly Remove My Rootkit http://chrisbenard.net/2009/07/08/kindly-remove-my-rootkit/ Ramblings of an inquisitive software developer in the Dallas area Tue, 17 Apr 2012 16:46:27 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: Bill http://chrisbenard.net/2009/07/08/kindly-remove-my-rootkit/comment-page-1/#comment-104069 Bill Sat, 25 Jul 2009 20:04:22 +0000 http://chrisbenard.net/?p=189#comment-104069 Chris, Thanks for the info and link to combofix. I've used gmer, but its not able to catch the main file or whatever is loading this garbage. At the end of your article, you wondered what they get out of doing this crap. From what I'm seeing on my machine, every time I do a google or yahoo search, I get a list of sites as normal. But when I click to go to a site, I am redirected to different sites. The only way to go to the site I wanted to go to is to copy or type in the url in the address box. Chris,
Thanks for the info and link to combofix. I’ve used gmer, but its not able to catch the main file or whatever is loading this garbage. At the end of your article, you wondered what they get out of doing this crap. From what I’m seeing on my machine, every time I do a google or yahoo search, I get a list of sites as normal. But when I click to go to a site, I am redirected to different sites. The only way to go to the site I wanted to go to is to copy or type in the url in the address box.

]]> By: Chris http://chrisbenard.net/2009/07/08/kindly-remove-my-rootkit/comment-page-1/#comment-102948 Chris Wed, 15 Jul 2009 14:55:55 +0000 http://chrisbenard.net/?p=189#comment-102948 LOL Lee! So true! I made a decision for my personal machine of convenience over security, and it directly contributed to this. I'm too stubborn though. Admin on my home box for life (with UAC turned off)! LOL Lee! So true! I made a decision for my personal machine of convenience over security, and it directly contributed to this. I’m too stubborn though. Admin on my home box for life (with UAC turned off)!

]]> By: Lee http://chrisbenard.net/2009/07/08/kindly-remove-my-rootkit/comment-page-1/#comment-102947 Lee Wed, 15 Jul 2009 14:47:44 +0000 http://chrisbenard.net/?p=189#comment-102947 I promise I won't make any snide remarks about an experienced software developer running as an administrator on his home machine. Promise. :) I promise I won’t make any snide remarks about an experienced software developer running as an administrator on his home machine. Promise. :)

]]> By: Chris http://chrisbenard.net/2009/07/08/kindly-remove-my-rootkit/comment-page-1/#comment-102817 Chris Tue, 14 Jul 2009 14:56:52 +0000 http://chrisbenard.net/?p=189#comment-102817 Excellent Phil! I'm glad you were able to fix it. Excellent Phil! I’m glad you were able to fix it.

]]> By: Phil http://chrisbenard.net/2009/07/08/kindly-remove-my-rootkit/comment-page-1/#comment-102806 Phil Tue, 14 Jul 2009 12:31:46 +0000 http://chrisbenard.net/?p=189#comment-102806 Hello Chris, just want to thank you for this "kindly written blogpost" :) I've removed the same rootkit tomorrow, after reading about combofix in your article. Nice blog, go on! Phil from Germany Hello Chris,

just want to thank you for this “kindly written blogpost” :)
I’ve removed the same rootkit tomorrow, after reading about combofix in your article.

Nice blog, go on!
Phil from Germany

]]>