Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 
Kookoo

788 posts

Ultimate Geek

Trusted

  #3297559 15-Oct-2024 11:28
Send private message

Done. A minor hiccup with graphics drivers and Lenovo BIOS update, but so far - so good.





Hello, Ground!



networkn
Networkn
32351 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #3297584 15-Oct-2024 12:44
Send private message

You did the right thing. You have reduced your risk of a more serious problem down the track. Well Done. 

 

 


ANglEAUT
2324 posts

Uber Geek

Trusted
Lifetime subscriber

  #3297668 15-Oct-2024 15:48
Send private message

Kookoo: Done. ...

 

Did you use the Microsoft Media Creation Tool or the Lenovo image creator?





Please keep this GZ community vibrant by contributing in a constructive & respectful manner.




Kookoo

788 posts

Ultimate Geek

Trusted

  #3297903 15-Oct-2024 20:17
Send private message

ANglEAUT:

 

Kookoo: Done. ...

 

Did you use the Microsoft Media Creation Tool or the Lenovo image creator?

 

 

Lenovo USB Recovery. It's been a while since I had any use for large USB sticks, so I ended up popping down to the warehouse get a 32GB one. Then it was mostly smooth sailing.





Hello, Ground!

ANglEAUT
2324 posts

Uber Geek

Trusted
Lifetime subscriber

  #3297922 15-Oct-2024 22:37
Send private message

networkn:

 

The problem you have, is if this crypto miner is there, you don't know what else is there. I'd assume that machine was compromised and I'd install from fresh (Wipe not reinstall OS over the top) ...

 

 

Emphasis mine, because of Perfectl Malware. Don't focus on the OS, focus on the ideas & concepts of the malware.

 

Excerpt:
=====

 

Perfctl further cloaks itself using a host of other tricks. One is that it installs many of its components as rootkits, a special class of malware that hides its presence from the operating system and administrative tools. Other stealth mechanisms include:

 

  • Stopping activities that are easy to detect when a new user logs in
  • Using a Unix socket over TOR for external communications
  • Deleting its installation binary after execution and running as a background service thereafter
  • Manipulating the Linux process pcap_loop through a technique known as hooking to prevent admin tools from recording the malicious traffic
  • Suppressing mesg errors to avoid any visible warnings during execution.

...

Besides using the machine resources to mine cryptocurrency, Perfctl also turns the machine into a profit-making proxy that paying customers use to relay their Internet traffic. Aqua Security researchers have also observed the malware serving as a backdoor to install other families of malware.
=====

 

and much more at the link.





Please keep this GZ community vibrant by contributing in a constructive & respectful manner.


1 | 2 
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic





News and reviews »

Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01


Epson Launches New AM-C550Z WorkForce Enterprise printer
Posted 9-Jul-2025 18:22


Samsung Releases Smart Monitor M9
Posted 9-Jul-2025 17:46


Nearly Half of Older Kiwis Still Write their Passwords on Paper
Posted 9-Jul-2025 08:42


D-Link 4G+ Cat6 Wi-Fi 6 DWR-933M Mobile Hotspot Review
Posted 1-Jul-2025 11:34


Oppo A5 Series Launches With New Levels of Durability
Posted 30-Jun-2025 10:15









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.