Hacktool rootkit

NAV just flagged me that Hacktool rootkit SVKP.SYS was a virus, but looking at google and other thread https://www.wilderssecurity.com/showthread.php?t=39083 seems to be a false positive? It was in system 32

 

See for example also:

http://www.dslreports.com/forum/remark,14616513

 

This link is in the link Fan J gave you , but i thought i'd post in anyway, T

http://securityresponse.symantec.com/avcenter/venc/data/hacktool.rootkit.html

 

Quotes from Kevin (BOClean) from that DSLR/BBR thread :

But I would advice to read that whole DSLR/BBR thread.

 

Here is my advice

Any program that uses double encryption should advice it's customer of the fact.

True ,,, programmers do not want to disclose their secrets but at the same time
knowladge is important. maybe a e-mail saying hey dude or dudetts I am using this for whatever reason would be nice.

Big question is if the programmers use special tools to PROTECT their program, is that such a bad thing?
I do not think so.

controler

 

I don't know about mentioning methods, most users wouldn't understand it anyway.. but mentioning that some AVs flag it as malicious, yes.

 

Everyone thanks for replies.
Notok I do not expect you to mention methods just want to confirm this is legit so i do not have to change passwords etc

 

...and how do i know what legit process it was to protect and now that i have deleted it and system resotre points...?

 

Hi Privateperson,

First I need to apologize that I was not more clear; sorry !

What I should have added, is this:

Let NAV put it in its quarantine.
Then see what will happen on your system for awhile.
In case one of your programs does not run as it should or used to, then you might assume that this is caused by putting that file in NAV's quarantine.
Then you can put it back from the NAV quarantine.
In case none of your programs has a problem, then you might leave that file in NAV's quarantine or delete it.

I guess that would be the best way to handle the situation.

I definitely should have posted that earlier; apologies once again !!!

You wrote that you have already deleted that file.
I am afraid that I don't know what to do now
Best thing perhaps now: just wait and see if one of your programs has a problem. If that happens, maybe you can re-install it.....

Regards, Jan.

 

No need to apologize I appreciate your input