G
Guest
I scanned my computer on 11-19-2005 and it found the F4ROOT KIT (F4IRootkit
Potentially Unwanted Software). It says it deletes it but when I scan it
again to see if it is removed it bring the same threat back up and says the
same thing about deleting it, but it is not deleted. Can somone please help
me with this. Below is what it tells me:
Detected Threats
F4IRootkit Potentially Unwanted Software
Details: F4IRootkit is a family of kernel mode rootkit which is distributed
in some Sony audio CDs, as part of the copyright protection mechanism. Upon
the installation, it creates a service called $sys$aries and loads the driver
aries.sys.
Status: Removed
High threat - High-risk items have a large potential for harm, such as loss
of computer control, and should be removed unless knowingly installed.
Infected registry keys/values detected
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_$SYS$ARIES
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_$SYS$ARIES
NextInstance 1
Detected Spyware Cookies
No spyware cookies were found during this scan.
It telling me it's removed, but its not. It ends up coming back up.
Potentially Unwanted Software). It says it deletes it but when I scan it
again to see if it is removed it bring the same threat back up and says the
same thing about deleting it, but it is not deleted. Can somone please help
me with this. Below is what it tells me:
Detected Threats
F4IRootkit Potentially Unwanted Software
Details: F4IRootkit is a family of kernel mode rootkit which is distributed
in some Sony audio CDs, as part of the copyright protection mechanism. Upon
the installation, it creates a service called $sys$aries and loads the driver
aries.sys.
Status: Removed
High threat - High-risk items have a large potential for harm, such as loss
of computer control, and should be removed unless knowingly installed.
Infected registry keys/values detected
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_$SYS$ARIES
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_$SYS$ARIES
NextInstance 1
Detected Spyware Cookies
No spyware cookies were found during this scan.
It telling me it's removed, but its not. It ends up coming back up.