Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Recently (shortly after midnight on 10/8/2013) I installed and ran Orbit Downloader. After learning that the latest version (4.1.1.8) has a botnet-like module included I immediately stopped the program and uninstalled.

In total, the program could only have been running for a few minutes (5 max) after installation. I have disconnected the computer from my home network, deleted all files it installed and came with, did a system restore to October 4th, and am currently running an avast boot time scan.

Are there any other steps I should take to assure that the program is is gone and can no longer cause any harm?

Is there any way to see now if my computer took part in a DDoS attack, or what the Bot-net could have done?

Source of info on the botnet-like module: http://www.welivesecurity.com/2013/08/21/orbital-decay-the-dark-side-of-a-popular-file-downloading-tool/

System specs: windows 7 (last update on the 4th), model is a Z570 (10249BU) (http://www.newegg.com/Product/Product.aspx?Item=N82E16834246156)

Update: avast has nothing to report

share|improve this question
    
What's your internet connection? 5 minutes is hardly enough time to do any damage to anything and i personally wouldn't stress. –  NULLZ Oct 9 '13 at 3:29
    
20 mbps for downloading and 2.24mbps upload (timewarner). Good to know still is there anything else you would recommend? –  user2860737 Oct 9 '13 at 3:56
    
Not really. I checked some of the links that the program is supposed to pull updates from and they seem dead. It sounds like only the KKM website is hard coded so yeah. Run AV and antimalware solutions and consult google if still concerned –  NULLZ Oct 9 '13 at 13:25

1 Answer 1

up vote 0 down vote accepted

System restore is almost enough . And since it has been discovered it has been flagged by almost every AV so yeah don't worry about it .

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.