ky331 Posted February 27, 2008 ID:13866 Share Posted February 27, 2008 Registry Keys Infected:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\asc3550 (Rootkit.Agent) here [via RegEdit] are the contents of that registry key:(Default) Reg_Sz (value not set)Display Name Reg_Sz asc3550ErrorControl Reg_Dword 0x00000001 (1)Group Reg_Sz SCSI miniportImagePath Reg_Expand_Sz \systemroot\system32\DRIVERS\asc3550.sysStart Reg_Dword 0x00000004 (4)Tag Reg_Dword 0x0000002a (42)Type Reg_Dword 0x00000001 (1)the file, which is also located in c:\i386, is 14,848 bytes in size, [modified] dated 8/17/2001 1:51 pmDescription: AdvanSys UltraWide PCI SCSI DriverCompany: Advanced System Products, Inc.Version: 5.1.2600.0created: 8/11/2004 5:46 PM Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted February 27, 2008 Root Admin ID:13867 Share Posted February 27, 2008 Already posted in the other thread . Looking into it. Link to post Share on other sites More sharing options...
nosirrah Posted February 27, 2008 ID:13869 Share Posted February 27, 2008 fixed Link to post Share on other sites More sharing options...
ky331 Posted February 27, 2008 Author ID:13872 Share Posted February 27, 2008 fix confirmed (database 414)you guys are the best! talk about prompt service!! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now