Thought this might save someone doing the same as I was supprised about the lack of info regarding this problem. AVG wastes another 8 hours or so hours of my life. These rootkits by both Alcohol and Demon are unharmful and are required for the function of a virtual drive. Uninstalled DemonTools, scanned AVG.no rootkits found. I had a brainwave.uninstalled Alcohol120, scanned AVG.only one rootkit found. And found out that both Alcohol120 and DemonTools use a random name generated hidden file to avoid detection by legit programs. I googled for some research on programs with random generated names for its files. I removed SecuROM just to make sure, it wasnt that. Now you can stop Trojans service and remove hidden registry keys from registry. It displays the results on the Results tab. It compares the list of keys received using standard functions and the list received from registry file. Upon restarting I scanned AVG again and found a different two rootkits(names were both 8.3, random letters and numbers, file type *.sys) I have tested with around twenty different Rootkit finders and removers(in safe mode,normal and dos) that were not able to find the rootkits AVG showed. It analyses the binary registry file on the hard drive. After removing with UnHackMe you need to restart to "complete removal". AVG would not allow any action to be taken with these rootkits however UnHackMe would. I have recently noticed two hidden rootkits in "System32/Drivers" found only by AVG Anti-rootkit(on 8.0.237) and UnHackMe.
0 kommentar(er)
