René Berber wrote:
Thomas Cameron wrote:
[snip]
Every time I try to install McAfee on the machine, I get an error saying
"The Windows Installer Service could not be accessed. This can occur if
you are running Windows in safe mode, or if the Windows installer is not
correctly installed. Contact your support personnel for assistance."
I think I'm screwed. This sound familiar to anyone?
Looks like a RootKit attack.
Have you tried clamav for Windows? There are several sources for binaries, I
use the one from the Cygwin packages.
Another, perhaps better alternative for the rootkit case, is to boot from a CD,
something like "System Rescue CD" which is Linux and can be used to scan (it
includes clamscan) NTFS file systems.
I don't know if clamav is good with rootkits, the one experience I had I cleaned
up by hand and then used the Linux version of f-prot which found a few more
hidden files.
HTH.
http://www.f-secure.com/v-descs/ircbot_es.shtml
Steve
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
