PDA

View Full Version : DDoS.RAT.rBot


HJThis1
June 23rd, 2005, 10:39 PM
Hello,To all

I hope someone here can help me with a problem
am having with TDS the last 3 times i have updated
i get this here but with different file names.

File Trace: Default trojan filename: DDoS.RAT.rBot
File: C:\WINDOWS\System32\systeminfo.exe
^
this time it's |

Thank you

HGD ;)

Gavin - DiamondCS
June 24th, 2005, 12:38 AM
Hi,

False alarm, you can ignore this.
Seems the bad guys are getting sneakier all the time - now content to OVERWRITE a legit windows file like this, just to get their nasty on a machine

I have removed the detection, will update soon

Robyn
June 24th, 2005, 03:21 AM
Thank goodness they are all FP's as I am getting a bit paranoid now I had these detections :'( almost to the point I didn't want to load TDS to see another alert like this :'( :'(

Gavin - DiamondCS
June 24th, 2005, 04:03 AM
All I want to know is why the trace didn't come up on my test setup.. might be due to XP SP1, might not.. will have to run a couple of tests each day now instead. Sorry for any inconvenience, expect no more of these anymore ;)

Robyn
June 24th, 2005, 06:05 AM
Thanks Gavin as it is one huge worry for me, even though I 'know' they are FP's they have me scanning my computer inside out :-[ Hopefully today I wouldn't see any Rats :o ;)

AAP2
June 26th, 2005, 01:01 PM
Hello,Gavin

Sorry about the name it was me how had asked this
but just like to say thank you all is great.

HGD:)

AAP2
June 26th, 2005, 01:02 PM
Hey,Gavin

Good god it was i who had asked this

HGD:)