Of course it is an interesting question, but a much more important question would be how to prevent rootkits from landing on your system, one ounce of prevention is worth a pound of cure, as they say.
Limiting a full account will help enormously towards that goal, and run an install inside the avast sandbox whenever in doubt and shun from dubious downloads and pre-scan others. Use EMET on the software you use.
Regularly check your OS and third party software for the latest updates and upgrades (use secunia.com/vulnerability_scanning/online/ ). Whenever using a browser use in-browser security (malcious script blocking etc.)(NotScripts, BetterPopupBlocker, Blocker 0.2. and NOREF extensions installed in GoogleChrome browser for instance), use avast fully updated, MBAM and SAS non-residential, a firewal, if you are into P2P-ing, which activities are being frowned upon by certain parties, be extra carefull and run a bootable AV cd to double check every now and then, but staying clear of unsafe Internet practices might be the best piece of advice there is to prevent that your original question even has to enter your head. So watch your clicks and stay safe and secure in the digital world,
[]Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
[]Double click on ComboFix.exe & follow the prompts.
When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
The thing is that I use norwegian language, so all I can really say is - is it under the first option you get when you right click, under open? If so, which option do I choose once I click that, I get to a new window with two options then.
Or what I mean to say is that I dont get any options that says “disable shield” or such when I right click - this is what I get when I right click, which is the same I get for MBAM and such:
Yes im finished one, disabled Avast like you said and runned it while I was away a bit, saw that my pc got restarted and that when I logged on that it would create the log, so amma attach it now, please comment.
BTW, is it possible to scan with Avast or do I have to delete Combofix? Just wondered.
And I scanned recently, found nothing, so for now it looks good I hope… Ill reply if it finds something, but this looks good for now, and you havent seen any suspicious of the logs yet have you?
Well in that case, its fine at this moment I hope! ;D
BTW, should I start using Firefox, since it has Noscript unlike Chrome?
No that is ample protection. Don’t you know that sometimes users can have over-protection and that will work against them?
You just should apply a safe browsing habit, for instance do not go for torrents laden with questionable and possible additional malcode, as keygens, software without the right certification etc. etc.
You know from intuition where you can get infected, so much you already learned here.
Also read what I have posted here: http://forum.avast.com/index.php?topic=37542.msg660804#msg660804
So when you are on the path to SafeHex habits, well stay on that path, come here more often and try to help this community, a belated welcome, Mo0nwalker, to these great forums,
