View Full Version : root kit scan


much2much
21st Sep 2012, 07:39
HI, can help with the below found with a sky-bot root kit scan are the malware or just hidden files::





Type: Key
Object: Flyout
Location: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Applets\SysTray\BattMeter\
Details: No admin in ACL
Type: Key
Object: Svc
Location: HKLM\SOFTWARE\Wow6432Node\Microsoft\Security Center\
Details: No admin in ACL


Type: Folder
Object: SrtETmp
Location: C:\Users\All Users\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\SRTSP\
Details: No admin in ACL
Type: Folder
Object: SrtETmp
Location: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\SRTSP\
Details: No admin in ACL



Tarq57
21st Sep 2012, 09:20
You mean "Spybot" rather than sky-bot, I think?

Last time I looked, the rootkit scanner was a beta. Shouldn't really be used, unless you know what you're doing, if that's the case.

ADS processes found using a rootkit scanner are not necessarily rootkits. When they're flagged, it means it might be suspicious, or it might not.

In this case, it would appear to be part of the process of Norton - which I presume is your antivirus - and probably harmless. And if Norton is not your antivirus, I strongly recommend you remove it.

That said, I'd install, update, and run a scan with MBAM, for a second opinion. It's a very good scanner. There is a free version.

green granite
21st Sep 2012, 11:13
WoW64 (Windows 32-bit on Windows 64-bit) is a subsystem of the Windows operating system that is capable of running 32-bit applications and is included on all 64-bit versions of Windows.

Milo Minderbinder
21st Sep 2012, 15:56
if you want to check for rootkits use Kasperky's TDSSKiller

Anti-rootkit utility TDSSKiller (http://support.kaspersky.com/faq/?qid=208283363)

Not a bad idea to follow that up with Hitman Pro afterwards

Run both in SAFE mode

much2much
21st Sep 2012, 17:35
thanks guys ,second opinion ,a good idea,already ran malware bytes, all looks well.sky(spy) bot,ok. aviator Frued slip up, or poor humor,:ok::ok:and ran the tdss killer .not tks (anti ice)