Recommended Posts

I figure this would be the place to ask. Just curious.

Kind of tired of dealing with rootkits on 7 lately.

I suppose they would wait till release to even try, but maybe there is a beta release preview of some Malware? Hehe

Would actually love to see this crap lessen, I'd rather show people how to do cool stuff with computers than see this kind of crap all day long.

jf

Unless Windows 8 has a new feature that makes the "average internet idiot" smarter, then no, I don't see it magically stopping malware any time soon. Stick a fool in front of a computer and they'll wind up getting it wrecked no matter which OS they're on.

I haven't, but then I have never had a malware infection on 7 or vista either, neither have my relatives or people I know.

at work I fix a rare few vista and 7 computers but mostly XP. But all the Vista and 7 malware I have seen have almost without exception been caused by user stupidity. and I'm not talking the regular average user "I don't know how to use a computer" stupidity, I'm talking the absolute doing the opposite of step by step instructions in small words stupidity.

We use McAfee at work and have seen rootkits on our systems.

Flash Ad's and Java attacks mostly. We require both for systems we use (payroll & document management) so there is no getting rid of them for now.

That explains that right there, you use McAfee at work! :x

How do you know that you aren't affected by a malware then?

I've often wondered that when some one says that too?

Haven't seen any infections with mulitple programs on my 8 Windows 7 machines, in a long time, or any of the Windows 8 machines I've played on.

How do you know that you aren't affected by a malware then?

You don't need resident antivirus software to check for that sort of thing. All the resident software does is maybe stop it before it gets installed, if it even detects it.. too many people use it as a crutch to compensate for bad safety habits.

  • Like 2

Of course Win8 will get infected just like any other system even Win7 as I've cleaned many with Win7 having infections so far and yes I've even gone as far as to on purpose test getting an infection on Win8 RP which reacted the same but did in fact end up being harder to remove from Win7 cause of the lack of support yet from 3rd party cleaners.

At the end of the day the end-user is responsible for what they click on - no AV or anti-malware application will prevent them all.

We use McAfee at work and have seen rootkits on our systems.

Flash Ad's and Java attacks mostly. We require both for systems we use (payroll & document management) so there is no getting rid of them for now.

Sure there is. Cut off all company users from the internet; Intranet only. No malware, job done!

People shouldn't be surfing the net on their employers dime, anyway.

Avast + Malwarebytes = Safe Computer Always

Windows 7 AND Windows 8

HAHAHAHA no.

I used to swear by Malwarebytes, but lately? Not so much. It still great for scanning, but their resident monitoring is something else. Not so much for what it finds, but for what it's doing to your system.

My wifes laptop has been overhearing a LOT lately, enough that it's been hitting it's thermal shut off limit and shutting itself down. I eventually tracked it down to MWB's live scanner using a crapton of CPU time constantly, and pushing the temps to > 95c.

I'll still use it for the weekly scan, but it's realtime protection is now OFF.

Sure there is. Cut off all company users from the internet; Intranet only. No malware, job done!

People shouldn't be surfing the net on their employers dime, anyway.

Because business systems NEVER have to access systems outside of intranet. Especially business and accounting, they would NEVER have to access external banks and accounts that would require the internet.

Get real.

Because business systems NEVER have to access systems outside of intranet. Especially business and accounting, they would NEVER have to access external banks and accounts that would require the internet.

Get real.

Seriously, you don't know how to limit access to specific sites only?

Wow, I hope you're not the admin! :p

A better example of where the **** do they get it at is "Mywebsearch" I swear to god (not joking) 99.999999999% of all of my 1,700+ customers have had this installed. yet I have NEVER been prompted to install it in my life.

On a side note, it's not just the people running XP that get rootkits. Have seen plenty of Windows 7 and windows vista 64bit MBR infections.

How the hell are you getting "rootkits" installed, i haven't run an AV package in 3 years and never get that crap.

You might not be dumb as a box of rocks when it comes to computers but a lot of people are. As to not insult anyone I will say when it comes to cars, i'm also as dumb as a box of rocks.

I can see how anyone of the users in this forum might not get them, but I work on the "idiots" if that's what you must call them, computers all day long.

And whether they asked for it or not, it walks or is let in right through the front door with Norton, MacAfee, Avast, MSE, running in the background.

I guess the more than a few times a month that I have to run TDSSKILLER.exe on a computer and it identifies an infection as a Rootkit is what I would term too often. Windows 7, Vista sure, all the time actually.

99.9% of the time it is a PC that is not fully patched that gets nailed.

But back to my original question. I probably posted the question out of frustration that I am having this week with yes, Rootkits, on Windows 7, that tddsskiller identifies as a "rootkit". Maybe Kaspersky is just calling it that for kicks?

Original question was has anyone seen it on 8, yet, but I should have known what I was in for when I posted it. I'll delete the post when my inbox gets to the ridiculous stage.

Hopefully UEFI, GUID partiton tables, and secureboot will stop a few for a while....

An up-to-date AV solution (even MSE) used by a user with a clue, will put a halt in most malware in the wild today, with other extant modern features, such as UEFI/GPT support and secure boot taking out (or neutralizing) the stragglers.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I am not a US citizen nor a Trump fan. Respect to both left and right. But I will, for the sake of fun, predict something for my own. There will come a day when the US and China will collide like titans ( over Taiwan or anything else ). Then, on that day, some people in this comment section will realize how good an idea it was to become independent in areas like that. ( Or atleast try )
    • Microsoft Edge gets tons of security features, including AI model that can see your screen by Usama Jawad Microsoft Edge may not be the most popular browser out there, but it does receive quite frequent updates that sometimes bring surprising new features and axe others that are not as popular. Now, Microsoft has detailed some of the new security enhancements that it has introduced in Edge for Business, typically used by commercial customers. Microsoft has emphasized that security features are baked into Edge for Business and offer native integration with security and governance tools like Defender and Purview. Browser sessions are governed by default on managed devices but can also be governed through dedicated work profiles on unmanaged devices. An important aspect in this area is controlling the use of shadow AI. We have talked about this before, but it essentially restricts employees from using unsanctioned AI apps through data loss prevention (DLP) policies, with Edge redirecting them to trusted AI services like Microsoft 365 Copilot. This feature, available as a pay-as-you-go (PAYG) license, ensures that confidential data never exits AI boundaries set by your organization in Purview. Additionally, Microsoft also has strong DLP policies for contractors. Contractors leveraging a Entra ID-joined work profile provisioned by their contracting company on a device managed by their actual employer can be restricted from downloading files locally. In such scenarios, the file is saved on the contracting firm's OneDrive rather than being downloaded locally. Another useful Edge security feature disallows copying and pasting from unmanaged locations and apps. Similarly, DLP policies can be configured at a granular level to restrict screenshots or downloading of files from certain locations. In the same vein, IT admins can block the installation of extensions, hosted apps, themes and scripts, and control if users can install extensions from external locations. They can also enable the installation of specific extensions and allow users to request access to certain extensions, so that they can be managed on a case-by-case basis. Finally, Edge for Business now has an on-device AI model that uses computer vision to see what's on your screen and block potentially malicious content immediately. This does not rely on site reputation, as it simply monitors what is being displayed on your screen, which means that it is effective against malicious content that takes over your screen and employs scareware tactics. Since this is an on-device AI model, it does use your system's resources, so it's enabled by default only on devices with at least 2GB of RAM and four CPU cores. You can find more details in the Microsoft Mechanics video here.
    • Could you come up with a slightly less depressing background for Tux instead of that gray gradient? Doesn't have to be cheerful, just less of a downer...
    • Linux 7.2's first release candidate gets off to a good start by Paul Hill Credit: Larry Ewing It has been a few weeks since the release of Linux 7.1, and in that time, the Linux 7.2 merge window has been open, where developers can submit their features and patches ready for the upcoming release. That window is now shut, and the release candidate phase has begun so that new features can be tested and further fixes applied. According to the founder of Linux, Linus Torvalds, this week’s release candidate looks “reasonably normal”. Although we are super early in the release candidates, this is a good sign as it makes it more likely that an eighth release candidate will not be needed. Torvalds even mentioned that the update’s stats are only larger than they really are because there was another AMD header drop with a third of the patch just being AMD GPU register definitions, which aren’t big changes but make the code contributed look larger overall. In addition to this, he noted that just over half the patch is drivers, even when excluding the AMD register dump. The rest of the changes are spread out over architecture updates, tooling, documentation, and core kernel updates. In the next week, Torvalds says that he will be chilling out, taking the week “mostly off”. Despite this, he will be reading emails and keeping up with things, so if he is slow responding, now you know why. He said he is hoping for a calm week, but we will just have to see if the second release candidate is actually like that. We should expect seven or eight release candidates before Linux 7.2 is released, so expect it around the end of August. If you missed it a few weeks ago, be sure to check out our coverage of Linux 7.1's release.
    • Ridiculous claim that the labor cost difference of $6000 annually would increase cost per phone by $200. The employees produce 3 phones per month or what?
  • Recent Achievements

    • Dedicated
      Zeynel earned a badge
      Dedicated
    • One Month Later
      JKR earned a badge
      One Month Later
    • Dedicated
      Asgardi earned a badge
      Dedicated
    • Conversation Starter
      jessse3334 earned a badge
      Conversation Starter
    • Reacting Well
      JuvenileDelinquent earned a badge
      Reacting Well
  • Popular Contributors

    1. 1
      +primortal
      496
    2. 2
      +Edouard
      248
    3. 3
      PsYcHoKiLLa
      154
    4. 4
      Steven P.
      86
    5. 5
      macoman
      65
  • Tell a friend

    Love Neowin? Tell a friend!