Results 1 to 10 of 10

Thread: Rootkit or not?

  1. #1
    Junior Member
    Join Date
    Apr 2014
    Posts
    6

    Default Rootkit or not?

    Just did a rootkit scan, 1 file is supsicious , malware scan says its clean.

    What is this file and should i delete the file?

    I have no issues what so ever with the system.

    Type: File
    Object: ~DFFDA43B66B786F72D.TMP
    Location: C:\Users\Mkey\AppData\Local\Temp\
    Details: No admin in ACL

    Keep up the good work SpyBot!!!

    Thanks!!

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,465

    Default

    Hello duncanalias,

    That's a AppData\Local temp file, no problem.

    Best regards.

    FYI:

    The site's "Report A Post" is used for such as spam not one's own topic.
    Last edited by tashi; 2014-04-14 at 17:59. Reason: clarify
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Junior Member
    Join Date
    Apr 2014
    Posts
    6

    Talking

    Quote Originally Posted by tashi View Post
    Hello duncanalias,

    That's a AppData\Local temp file, no problem.

    Best regards.

    Thank u for your response.

    So i guess that a temp file never can be a rootkit? or malware, or virus, or....
    Harmless always?


    Questions provide knowledge me like :D

  4. #4
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,465

    Default

    Hello duncanalias,
    Quote Originally Posted by duncanalias View Post
    Thank u for your response.

    So i guess that a temp file never can be a rootkit? or malware, or virus, or....
    Harmless always?


    Questions provide knowledge me like :D
    Temp files can be infected, do you clean out your Internet temp files?

    Best regards
    Last edited by tashi; 2014-04-14 at 18:00. Reason: clarify
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  5. #5
    Junior Member
    Join Date
    Apr 2014
    Posts
    6

    Default

    Quote Originally Posted by tashi View Post
    Hello duncanalias,


    Temp files can be infected, do you clean out your Internet temp files?

    Best regards

    Yes, like once a month.

    After the rootkit scan i started to have some errors and warnings in the firefox console that dit pop up. (after cleaning temp files)

    No problems on sites do... everything seems to work fine.

    i saved the errors and warnings in case you want to know.
    Last edited by duncanalias; 2014-04-14 at 18:24.

  6. #6
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,465

    Default

    Hello duncanalias,

    Please list:
    Operating system.
    Security programs installed.

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  7. #7
    Junior Member
    Join Date
    Apr 2014
    Posts
    6

    Default

    Quote Originally Posted by tashi View Post
    Hello duncanalias,

    Please list:
    Operating system.
    Security programs installed.

    Best regards.

    Windows 7 Ultimate (x64)
    Eset NOD32 Antivirus 7
    Spybot-S&D
    SpywareBlaster
    Windows Firewall

  8. #8
    Junior Member
    Join Date
    Apr 2014
    Posts
    6

    Default

    Quote Originally Posted by tashi View Post
    Hello duncanalias,

    That's a AppData\Local temp file, no problem.

    Best regards.

    FYI:

    The site's "Report A Post" is used for such as spam not one's own topic.
    FYI:

    I reported a message with spam. After that the message got deleted and the account that whas sending the message got the tittle "Banned Spammer"
    That all happend pretty fast! Thumps up!

  9. #9
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,465

    Default

    Hello duncanalias,
    Quote Originally Posted by duncanalias View Post
    Windows 7 Ultimate (x64)
    Eset NOD32 Antivirus 7
    Spybot-S&D
    SpywareBlaster
    Windows Firewall
    Sounds good.

    I take it your version of Spybot is without the AV so just one AV is installed as it should be.

    Quote Originally Posted by duncanalias View Post
    FYI:

    I reported a message with spam. After that the message got deleted and the account that whas sending the message got the tittle "Banned Spammer"
    That all happend pretty fast! Thumps up!
    Ah yes, understood.

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  10. #10
    Junior Member
    Join Date
    Apr 2014
    Posts
    6

    Default

    Quote Originally Posted by tashi View Post
    Hello duncanalias,


    Sounds good.

    I take it your version of Spybot is without the AV so just one AV is installed as it should be.

    Best regards.
    Yup, thats right

    thnx for all
    Last edited by duncanalias; 2014-04-15 at 01:08.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •