We help IT Professionals succeed at work.
Get Started

Windows 7 Hit with a RootKit

175 Views
Last Modified: 2015-12-31
One if my client's employees running Win 7 has been hit with a rootkit. Her system still runs but it's slow. It's had Symantec Endpoint Protection on it which is reporting numerous Trojans being caught throughout the day.  

When she called me, my first thought was a backup of her data followed by a clean install of Windows but she is running all the financial apps for the company. A clean install would take her down for a few days at a very busy time of the year.

Monday evening, I installed Malwarebytes and ran it with the Scan for Rootkits option. It found a ton of modules, quarantined them and Windows was restarted. I know the system is still infected and I decided not to connect to it remotely to stop any transmission of her problem to my system. I haven't been able to look at it again but plan on picking up the system tomorrow to clean it over the weekend (without connecting it to my network).

I've working on spyware and rootkits before and know the tools are always changing and being upgraded. If you have removed a rootkit lately and have any tools that have worked well, that feedback would be appreciated.

Even if I can get the system clean, I'm going to recommend a new anti-virus, a browser anti-exploit and a clean install later on.
Comment
Watch Question
Fixer of Problems
CERTIFIED EXPERT
Most Valuable Expert 2014
Commented:
This problem has been solved!
Unlock 4 Answers and 13 Comments.
See Answers
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant

An Experts Exchange subscription includes unlimited access to online courses.

Get Started
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE