Ok mess around with hxdef, somehow installed service and hides itself. Now i can't seem to get rid of it, i would download the source but it automatically hides itself when i try to download.
hegemonie
Feb 3 2004, 08:15 AM
there are some tools that can detect and remove several rootkits. if you're using Win2k have a look at Patchfinder2
Or start your PC in safe mode and look for a suspicous service
Axl
Feb 3 2004, 08:30 AM
er no cigar with the safe mode tried already i'm in xp, i was doing some development made a boo boo.
123spawnie123
Feb 3 2004, 09:00 AM
try net stop hackerdefender084 or whatever name you gave the ServiceName in it's ini
if you run iis/or any other webserver, connect throught the backdoor to ur server and goto the dir ur exe is in and type hxdef084 -:uninstall you should be able to do that as long as you haven't removed rcmd.exe from the root process
for version 073 there's a rootkit detector wich can stop it
detonator
Feb 3 2004, 01:29 PM
i use for this handle.exe this gives you the pid of the hxdef-process then use kill.exe pid then you are able to find and delete the service