TechSpot

hacktool.rootkit- I don't know what to fix from my HJT logfile

By rkidon
Feb 5, 2006
  1. I have Norton Antivirus 2005 installed. I've got myself with the hacktool.rootkit virus, found in "remon.sys" file. I installed HJT, obtained a logfile, but I don't know how to read it and what to fix. Can anyone help me, please?
    I use this computer for 2 days with Norton Antivirus 2005 preinstalled. All the updates are done, all the windows xp updates were done, and I still got this problem. I have another computer with win xp and kaspersky antivirus and antihacker on it, but never got this hacktool.rootkit problem in one year.?!

    Thank you!
     
  2. rkidon

    rkidon TS Rookie Topic Starter

    i forgot to attache the logfile. here it is !
     
  3. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 25,948   +19

  4. rkidon

    rkidon TS Rookie Topic Starter

    I attached the new log file. What should I fix from this file?
     
  5. rkidon

    rkidon TS Rookie Topic Starter

    anyone? can help me out?
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 25,948   +19

    Boot into safe mode. See how HERE

    Turn off system restore.(XP/ME only) See how HERE

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE


    open your task manager, and end process for(if there)
    Sc32Inch.exe

    Close task manager.

    Let HJT fix this.


    O23 - Service: Socks-Cap (Sc32Inch) - Unknown owner - C:\WINDOWS\Sc32Inch.exe

    Close HJT.

    Click start/run, and type services.msc into the run box, and press the enter key.

    When the window opens, maximise it, and locate the above 023 entry. Double click on it, and select stop if it`s running. Set the startup type to disabled.

    Click apply/ok.

    Locate the following bold file, and delete it.

    C:\WINDOWS\Sc32Inch.exe

    Boot into normal mode, and turn system restore back on.

    Regards Howard :)
     
  7. rkidon

    rkidon TS Rookie Topic Starter

    Thank you, Howard !
    I'm sure it would have worked, but I've already reinstalled Windows.... damn viruses and norton antivirus, which is crap ! go for kaspersky, guys !
     
  8. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 25,948   +19

    Oh well. At least you know your computer is clean now.

    I agree that Norton is crap lol.

    These forums are full of problems caused by Symantec/Norton crapware.

    Regards Howard :)
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.