jobe111

It was a file that I've had stored that was weeks old, so this rootkit sought out random executables and attached itself to them in order to keep itself from being wiped out. I was using Norton 360 to try and clean things up when this happened. After it started to clean infections, Norton listed dozens, possibly hundreds of files that had quickly become infected thereafter, so this rootkit spread itself all over.

Have you given this nasty bugger a name yet? Not really sure how that process works...

I would also like to note that either this, or one of the infections it downloads, appears to have the ability to root itself inside random executables on your hard drive. I am already to the point of reinstalling Windows on another HD, and when I attached the infected drive to pull off what files I could, it then infected my new build of XPSP3. It was just a random file (Foxit reader 3.0 installer) that I had stored, and when running it, it did its magic all over again.

I have become infected with this as well. According to VIPRE, it has attached itself to winlogon.exe with the above listed IP's. Prevex lists my alg.exe and regedit.exe as infected by rootkits. If there is anything I can do or submit to help get this looked at, let me know.