What to do after being rootkitted?

August 30, 2011 at 00:18:51
Specs: Windows 7 64 bit
I was recently rootkitted (I believe).

The file had a .com extension and it was an ms dos executable. I opened it in notepad before i deleted it and it had a bunch of stuff concerning visual basic and dos.

After running the file it immediately disappeared and my computer started to act quite sluggish.
I than noticed that my Facebook was hacked and a bunch of gay porn was uploaded, so I quickly disconnected my PC from the internet, got on my laptop and changed my password to every major website I had an account for. I also noticed that there were disgusting items in my amazon.com cart also.

I have a feeling that the passwords for both accounts were taken from Firefox's database.

At the moment I have formatted the hard drive and I am awaiting an SSD that I just bought to use as my OS drive.

Could this have spread to other drives, and could anything else have been stolen other than website passwords?

Also this file came clean when i scanned it with every single scanned, from microsoft, mcafee, kasperky, avg, it did not send any red flags.

See More: What to do after being rootkitted?

Report •

August 30, 2011 at 00:22:27
Also during that time I kept getting SMTP failures.

Report •

August 30, 2011 at 00:32:17
It could have been this, its very recent:

Report •

Related Solutions

Ask Question