Hatred
2008-10-06, 07:05
Before i go to the malware removal forum about virtumonde i was wondering if i should rename hijackthis after reaing the following:
http:// forums.windrivers.com/showthread.php?t=80306
First off, the processes for it run in both normal and safe mode. It also detects when HijackThis is run. The detection is done by recognizing the name of the file when it is executed, so renaming hijackthis.exe to hjt.exe, randomname.exe, or whatever, effectively prevents this stealthing strategy from working.
http:// forums.windrivers.com/showthread.php?t=80306
First off, the processes for it run in both normal and safe mode. It also detects when HijackThis is run. The detection is done by recognizing the name of the file when it is executed, so renaming hijackthis.exe to hjt.exe, randomname.exe, or whatever, effectively prevents this stealthing strategy from working.