Recommended Posts

I figure this would be the place to ask. Just curious.

Kind of tired of dealing with rootkits on 7 lately.

I suppose they would wait till release to even try, but maybe there is a beta release preview of some Malware? Hehe

Would actually love to see this crap lessen, I'd rather show people how to do cool stuff with computers than see this kind of crap all day long.

jf

Unless Windows 8 has a new feature that makes the "average internet idiot" smarter, then no, I don't see it magically stopping malware any time soon. Stick a fool in front of a computer and they'll wind up getting it wrecked no matter which OS they're on.

I haven't, but then I have never had a malware infection on 7 or vista either, neither have my relatives or people I know.

at work I fix a rare few vista and 7 computers but mostly XP. But all the Vista and 7 malware I have seen have almost without exception been caused by user stupidity. and I'm not talking the regular average user "I don't know how to use a computer" stupidity, I'm talking the absolute doing the opposite of step by step instructions in small words stupidity.

We use McAfee at work and have seen rootkits on our systems.

Flash Ad's and Java attacks mostly. We require both for systems we use (payroll & document management) so there is no getting rid of them for now.

That explains that right there, you use McAfee at work! :x

How do you know that you aren't affected by a malware then?

I've often wondered that when some one says that too?

Haven't seen any infections with mulitple programs on my 8 Windows 7 machines, in a long time, or any of the Windows 8 machines I've played on.

How do you know that you aren't affected by a malware then?

You don't need resident antivirus software to check for that sort of thing. All the resident software does is maybe stop it before it gets installed, if it even detects it.. too many people use it as a crutch to compensate for bad safety habits.

  • Like 2

Of course Win8 will get infected just like any other system even Win7 as I've cleaned many with Win7 having infections so far and yes I've even gone as far as to on purpose test getting an infection on Win8 RP which reacted the same but did in fact end up being harder to remove from Win7 cause of the lack of support yet from 3rd party cleaners.

At the end of the day the end-user is responsible for what they click on - no AV or anti-malware application will prevent them all.

We use McAfee at work and have seen rootkits on our systems.

Flash Ad's and Java attacks mostly. We require both for systems we use (payroll & document management) so there is no getting rid of them for now.

Sure there is. Cut off all company users from the internet; Intranet only. No malware, job done!

People shouldn't be surfing the net on their employers dime, anyway.

Avast + Malwarebytes = Safe Computer Always

Windows 7 AND Windows 8

HAHAHAHA no.

I used to swear by Malwarebytes, but lately? Not so much. It still great for scanning, but their resident monitoring is something else. Not so much for what it finds, but for what it's doing to your system.

My wifes laptop has been overhearing a LOT lately, enough that it's been hitting it's thermal shut off limit and shutting itself down. I eventually tracked it down to MWB's live scanner using a crapton of CPU time constantly, and pushing the temps to > 95c.

I'll still use it for the weekly scan, but it's realtime protection is now OFF.

Sure there is. Cut off all company users from the internet; Intranet only. No malware, job done!

People shouldn't be surfing the net on their employers dime, anyway.

Because business systems NEVER have to access systems outside of intranet. Especially business and accounting, they would NEVER have to access external banks and accounts that would require the internet.

Get real.

Because business systems NEVER have to access systems outside of intranet. Especially business and accounting, they would NEVER have to access external banks and accounts that would require the internet.

Get real.

Seriously, you don't know how to limit access to specific sites only?

Wow, I hope you're not the admin! :p

A better example of where the **** do they get it at is "Mywebsearch" I swear to god (not joking) 99.999999999% of all of my 1,700+ customers have had this installed. yet I have NEVER been prompted to install it in my life.

On a side note, it's not just the people running XP that get rootkits. Have seen plenty of Windows 7 and windows vista 64bit MBR infections.

How the hell are you getting "rootkits" installed, i haven't run an AV package in 3 years and never get that crap.

You might not be dumb as a box of rocks when it comes to computers but a lot of people are. As to not insult anyone I will say when it comes to cars, i'm also as dumb as a box of rocks.

I can see how anyone of the users in this forum might not get them, but I work on the "idiots" if that's what you must call them, computers all day long.

And whether they asked for it or not, it walks or is let in right through the front door with Norton, MacAfee, Avast, MSE, running in the background.

I guess the more than a few times a month that I have to run TDSSKILLER.exe on a computer and it identifies an infection as a Rootkit is what I would term too often. Windows 7, Vista sure, all the time actually.

99.9% of the time it is a PC that is not fully patched that gets nailed.

But back to my original question. I probably posted the question out of frustration that I am having this week with yes, Rootkits, on Windows 7, that tddsskiller identifies as a "rootkit". Maybe Kaspersky is just calling it that for kicks?

Original question was has anyone seen it on 8, yet, but I should have known what I was in for when I posted it. I'll delete the post when my inbox gets to the ridiculous stage.

Hopefully UEFI, GUID partiton tables, and secureboot will stop a few for a while....

An up-to-date AV solution (even MSE) used by a user with a clue, will put a halt in most malware in the wild today, with other extant modern features, such as UEFI/GPT support and secure boot taking out (or neutralizing) the stragglers.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Just another reason (aside from many others) not to use Edge. Firefox 153.0b5 DEx64 has a similar feature added recently in prior builds that I will turn off at some point when I get around to it. It's the new "Something looks suspicious" page that pops up here and there. It cleverly hides itself between web pages that I've actually visited; as a result, you know, of selecting a web page and telling the browser where to go. The interesting thing is that it does not produce these warnings from pages that I, as the only intelligent user of the browser in my system, have ever directed the browser to open! What seems to be happening is that the browser looks at all the goofy ad links on a web page I do actually open and selects one that "looks suspicious" and then creates the "something looks suspicious" web page, which is neatly inserted, as mentioned, between web pages my RB ("real brain") has directed the browser to load in a session. The thing is, I usually look at links I am considering to follow before I ask the browser to load them, and in cases I have noticed where the link does indeed look suspicious, most of the time I will choose to not follow the link at all. Doesn't everyone do this or something similar? I am picky about what I voluntarily load... (I don't like links that start off fine, with a site designaiton that seems normal enough but then is followed by indecipherable alphanumeric strings many, many lines long, etc. I tend to reject those because they look suspicious. They may not be, but I don't care... I'll stay with Firefox, of course, if for no other reason than they usually let you turn off the junk you don't like. And because it isn't Edge... But at some point Microsoft will come to realize that putting your bookmarks on the left side is a Good Thing for a lot of people, just as Microsoft discovered when it had the bright idea of nailing the Windows taskbar to the bottom of the screen, when for decades Microsoft browsers had left that placement up to the user. They have finally reversed the obscenity of that decision. Finally.
    • Google was using the old CATPCHAs data to train their LLMs. What is the say they won't use this camera data of users to train their LLM? these companies need some strict regulations!
    • Depends on what you need. Might be a bit clearer on what you plan to do with it. Sort of a waste if you get the newest and greatest, but don't know how to use it.
    • NTLite 2026.06.11200 by Razvan Serea NTLite is a Windows configuration tool that allows you to modify your existing Windows install or an image yet to be deployed, remove Windows components, configure and integrate, speed up the Windows deployment process. Reduce Windows footprint on your RAM and storage drive memory. Remove components of your choice, guarded by compatibility safety mechanisms, which speed up finding that sweet spot. Windows Unattended feature support, providing many commonly used options on a single page for easy setup. Easily integrate a single or multiple drivers, update or language packages. Package integration features smart sorting, enabling you to seamlessly add packages for integration and the tool will apply them in the appropriate order, keeping hotfix compatibility in check. One of the important new features of NTLite (compared to its predecessors) is the ability to modify an already installed the operating system, by removing unnecessary components. Supports Windows 11, 10, 8.1 and 7, x86 and x64, live and image. Server editions of the same versions, excluding support for component removals and feature configuration. ARM64 image support in the alpha stage. Does not support Checked/Debug, Embedded, IoT editions, nor Vista or XP. NTLite 2026.06.11200 changelog: New Secure Boot Migration support: Verification, certificate staging, and boot-manager/sector update across the Image, Updates, Apply, and Create-ISO pages (2023 CA migration, optional 2011 revocation, Anti-rollback, Boot sector choice etc) Secure Boot Host Readiness: Live host Secure Boot migration monitor and Servicing-task control Option under Image page - C:\Windows row, or load the host as the target - Updates - Secure Boot Image: 'Sort mounted images first' option for the image list in Menu-Settings UI: Hover description card for Components and Unattended pages, selectable text and quick access to Compatibility options Command line: Relay commands into the already-running instance Enables controlling already running NTLite via ntlite.exe Use /NewInstance to launch an additional instance using CLI operations (premium) UI: 'New instance' option via main menu instead of a secondary ntlite.exe prompt Apply: Hide individual Apply-page notes with a per-note dismiss (X), critical excluded Settings: 'Unsigned RDP file launch warnings' tweak (RDP client), bypassing the April 2026 security-update prompt on RDP connections Upgrade Image: Live OS and deployed image editing now unlocked on free/test licenses, same licensing as images Image: 'Recompress' option in manual dialog Remove Editions to shrink the WIM in one session Image: SWM part size set inline on the Apply page and image dialogs, split-size popup retired Image: Relative 'Last change' dates; editions grouped by build time to reduce noise Image: 'Forget - Missing' on the Edit-cache menu to mass drop entries whose folder is gone Components: Root groups reorganized - user-facing groups first, system/critical last Components: Show filter options to view components by Template or App-type, since Apps are now merged into groups Presets: Delete confirmation now lists the multi-selected preset names UI: Design update propagated to the rest of the tool UI: Filter and search match words in any order and partially, better results filtering Components Unattended: Input-locale language derives from the user locale, with an independent keyboard picker, enables combinations previously unavailable Unattended: Input-locale now allows for a user value override Unattended: Localization OOBE WinPE now can be copied with the new WinPE Copy OOBE localization toggle, enter locale settings once for both stages Updates: Downloader greys and locks updates the image already carries (hotfix and MSIX) Updates: Resume interrupted update downloads Command line: Many upgrades, see /?, now prints help to the console or redirected output UI-Translation: Finnish language added, also thanks for Chinese Traditional (Matt), French (tistou77), Italian (clarensio), Russian (RDS), Swedish (1FF), Vietnamese (Vu Anh Vu) Fix Components: Containers removal breaking Apps deployment Components: Microsoft Account had leftovers when Easy Migrate is kept Image: Export to an existing WIM improvements, Append renamed to Merge Image: Improved 26H1 live removal support Image: No more 'X:\ not accessible' popup for certain drives during image scan Presets: Manual image refresh picks up presets added/removed outside the app Tweaks: Disabled visual-effect animations no longer return after first logon on a new profile Tweaks: Live Visual Effects toggles (animations, drag full windows, font smoothing) now apply correctly Download: NTLite 2026.06.11200 | 20.5 MB (Free, paid upgrade available) Link: NTLite Home Page | NTLite Features | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Ah. La Fontana De Incontinentia ! Bella ! Bella !
  • Recent Achievements

    • One Year In
      BA the Curmudgeon earned a badge
      One Year In
    • Conversation Starter
      rosiecharles earned a badge
      Conversation Starter
    • First Post
      KMilenkoski1202 earned a badge
      First Post
    • First Post
      carols23 earned a badge
      First Post
    • One Month Later
      Tom Willson earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      504
    2. 2
      +Edouard
      257
    3. 3
      PsYcHoKiLLa
      151
    4. 4
      Steven P.
      93
    5. 5
      macoman
      67
  • Tell a friend

    Love Neowin? Tell a friend!