TDL3 Rootkit Signs/Symptoms?
Posted 16 February 2010 - 01:35 PM
I was wondering what the signs/symptoms of a TDL3 Rootkit infection are? (And the best ways to detect it if there are no clear signs?)
I noticed that I had an update queued up on Windows Update (MS10-015) but it wasn't automatically selecting/downloading itself, so I decided to look up what it was/what it was for and a possible reason... and that is when I came across:
http://www.bleepingcomputer.com/forums/t/296204/tdl3-rootkit-is-causing-bsod-in-17-year-old-ms-bug-patch/ ("TDL3 rootkit is causing BSOD in 17-year old MS bug patch!")
Which made me somewhat... worry. Before I download the update, I'd like to ensure that I don't have this rootkit since I do not have a Windows CD (the people I bought my Laptop from decided to be so kind and not include one) and don't want to deal with the hassle.
I'm fairly certain I don't have it (MABM/SAS/my AV come up clean, nothing out-of-the-ordinary happening), and I'm vastly paranoid about what websites I go to. And on that note... I take it the following sites are all 'okay/safe' ones? I've just never really gone to them/seen them before (they were linked in the above bleepingcomputer link). Yes, I feel as stupid asking this as you probably think I am as you read it. >.>
Posted 16 February 2010 - 02:59 PM
- Google redirection.
- Slowness of the computer and poor performance.
- BSODs that occur immediately after XP splash screen appears.
- infected atapi.sys and iastor.sys.
For more specific analysis and explanation of the infection, please refer to:
Microsoft halts Windows Update distribution of security fix after blue-screen reports.
Edited by quietman7, 16 February 2010 - 02:59 PM.
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users