IM.GiftCom.All

[bygeek]

Just read an article about this, but I can't find any information on identifying and removing it. Any suggestions?

 

[erikhertzel]

I have done some research on this one. No companies are posting removeal instructions, but they are saying that it installs a rootkit.

If you need a tool to remove it, I would look here:

http://www.sysinternals.com/Utilities/RootkitRevealer.html

 

[bygeek]

Thanks. I'll d/l the tool. I'd be interested in knowing how someone would know if they're infected, since most of the a/v scanners won't detect it.

 

[erikhertzel]

I'm not sure at this point that anyone has released any information about how one would know about infection, but that may be part of the problem since your typical Antivirus software can't find rootkits.

I guess if they download the file with IM and see the Santa image, they will know they have been infected.

 

[aquias]

Information is starting to surface, but not a massive amount...read through this link

http://vil.nai.com/vil/content/v_125002.htm