[x]
Posted via EE Mobile

Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.
10/08/2009 at 12:57PM PDT, ID: 24797334 | Points: 500
[x]
Attachment Details

Has anyone heard of this specific  _qbot variation called _qbotynteb.exe?

Asked by DSBONE in Latest Threats, Anti-Virus

We seemed to have been hit with this specific roolkit and our AV cures the computers but at the same time seems to corrupt some system files (Netlogin and DHCP Services to be exact) after the system is rebooted.  The only way we can fix the problem is run MS repair on the computers that have been infected or reimage.  Does anyone know where we get our hands on this rootkit exe in order to test exactly what it is doing on a standalone system and how our AV is handling it while we are in a control environement?  We would like to know exactly what system files are being altered or deleted during the cure.  We haven't been able to capture the file before our AV quarantines it.  Where can we actually save this file to a flash stick and use it in a controlled environment?  Tks.
 
Keywords: Has anyone heard of this specific _q…
Title
1 Standard response material re Spywar…
 
Loading Advertisement...
 
[+][-]10/13/09 05:11 AM, ID: 25559058

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]10/13/09 11:53 AM, ID: 25563023

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]10/15/09 02:54 AM, ID: 25578888

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
 
Loading Advertisement...
20091111-EE-VQP-91 - Hierarchy / EE_QW_3_20080625