AumHa Forums

Three weeks ago, all the computers on my brother's home network were atttacked by what I think is a rootkit virus. The only help I'm seeking is toward an identification of what virus it is and how he can assure it won't come back. Also, is it possible this was not done remotely?

The machine is most severely affected is a dell inspiron 1720 running vista home premium.
Another is a new Alienware M11X, 11 inch laptop, running Windows 7 home premium.

The following are the symptoms of the infection:
-it starts at boot
-it can turn on wirelss lan remotely
-it uses windows media center heavily
-whoever is accessing the machine is creating virtual drives and allowing more or less public access
-one of the machines seems to be being used as a server for cbs programming (I know how goofy that sounds)
-is has repaired itself after a reformat and reinstall of the OS
-even unplugged, with networking turned off, manages its own virtual drive that's invisible
-all programs by brother installs to the computer are also installed to one of the virtual drives
-it calls internet installs programs and files to the hard drive
-uses pxe
-an xbox 360 is part of the network and, since the attack, the usb ports are no longer working


One final point; I'm asking this because my brother is being redirected away from this site . Any help is appreciated. Any questions or clarification, please let me know.

Dan

Microsoft PCSafety provides home users (only) with no-charge support in dealing with malware infections such as viruses, spyware (including unwanted software), and adware.
https://support.microsoft.com/oas/defau ... =7552&st=1

Also available via the Consumer Security Support home page: https://consumersecuritysupport.microsoft.com/