Mebroot virus

sWiZzLe · 14 Jan 2008 at 15:39

Has anyone come across this?

I ran the GMER program on Vista 64, it gave me some error but says i have 3 hidden processes which could be rootkit related but i cant kill them.

I have just run Blacklight Rootkit Eliminator (one of the few that works with Vista 64) and it hasnt found anything :confused:

Gonna reboot and run Gmer again i think ...

iviv · 14 Jan 2008 at 15:45

Many are falling victim via booby-trapped websites that use vulnerabilities in Microsoft's browser to install the attack code.

Use firefox?

sWiZzLe · 14 Jan 2008 at 15:53

99% of the time yes, but sometime IE for things that wont work on Firefox.
Not keen on using IE, it crashes a lot :mad:

Energize · 14 Jan 2008 at 16:15

I thought the protected mode was supposed to stop this sort of thing happening?

sWiZzLe · 14 Jan 2008 at 16:40

Phew no virus's here

Booted into Vista 32 ran Gmer and Blacklight and nothing showed up.

I think the hidden processes may have something to do with Tuneup Utils - one of which must've been the bootscreen as the one i had has been replaced by a windows one ... which is quite nice actually, i think its the 'coming out of hibernation' one