So, I was bailing out two of my technicians, because a computer they both worked on came back for Blue Screen Of Death and Firefox crashing issues. (To their credit, the suggestions I gave them based on the information they gave me didn’t help them fix it.
P) After some digging, and a very lucky crash while trying to convert the filesystem from FAT32 to NTFS, I found out it was a rootkit infection! So, if your Windows 2K/XP/2003 machine is giving a STOP 0×0000008e on boot,.reboot, or during lots of filesystem access -or- STOP 0×00000044 while surfing the net, especially in Firefox, -or- you get a STOP error message with the module lzx32.sys, you probably have a Backdoor.Rustock.B infection. Quick Fix: Boot your machine to a Recovery Console using your Windows Install CD, type DISABLE pe386 (this disables the rootkit), eject CD, Boot into normal mode, and run rustbfix.exe. Thanks to Symantec and the guy who made the rootkit killer.
Comment Meta:RSS Feed for comments
TrackBack URI



Pages
Categories
Tag Cloud
Entries RSS
Seven
City
Characters
Landscape
Nature
Shapes ![[-]](http://www.inanis.net/blog/wp-content/uploads/2010/06/happymac.png)
![[-]](http://www.inanis.net/blog/wp-content/themes/seven/images/st_link.png)