This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Follow up to DeltaLima help Rootkit

2 min read

This thread's last reply is from November 6, 2010, 8:06 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

PatL
DeltaLima:

This is PatL. You helped me with a recent problem, "malware hidden on desktop" posted 28 Oct 2010. The subject has been achived. I apologize if this is the incorrect place/method to contact you, but I have a qyestion concerning the rootkit.

I have reformatted/reinstalled windows XP Pro. I did this by booting from the windows installation CD. I have a question and pardon me if I seem parinoid. Can the rootkit stay behind on my hard drive even after it is reformatted?

I ask this for 2 reasons: I was first alerted to the possibility of my infection because each time I started windows I had a 3-4 second burst of activity and a blinking DOS-like cursor flashing in the upper left-hand corner of my screen. I did not remember that ever happening until I became infected. I still get the blinking cursor, even after the reformat/reinstall.

Additionally, I had 1 partition on my hard drive prior to infection. When I reformatted/reinstalled windows the setup asked which partition should it install too. It gave a choice of C or another un-named, much smaller, 32MG, partition. I have not installed windows in a long time and did not think much of it at the time, but is it possible that the rootkit created another partition, hid it and it remains behind even when I reformat C:?

Once again I apologize if this post is in the wrong forum. But since this infection incident I find I am a little crazy, very angry and mistrusting of things I once took for granted. I guess it is the nature of the beast?

Any assistance is greatly appreciated and I thank you in advance for your time and trouble.

PatL
NonSuch Administrator
Your issue is not one that can be answered by a simple yes or no, it will likely require analysis of your computer.

Please familiarize yourself with the forum rules: >Forum Posting Rules - Please Read<

In order for us to help you it is necessary that you provide us with a HijackThis log. Please follow the guideline at the link below to start a new topic and post your HijackThis log by pasting it into your post. Do not utilize attachments.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<