Home page logo

fulldisclosure logo Full Disclosure mailing list archives

RE: Help, possible rootkit
From: "RandallM" <randallm () fidmail com>
Date: Sun, 24 Oct 2004 16:41:21 -0500

Billy said:


Message: 1
From: "BillyBob" <billybobknob () hotmail com>
To: "Full Disclosure" <full-disclosure () lists netsys com>
Date: Sat, 23 Oct 2004 13:05:29 -0300
Subject: [Full-disclosure] Help, possible rootkit

I have noticed that my XP system is behaving like I have a rootkit.

-- -- --
 __ __

1. Go directly to safe-mode
2. go to regedit and check start up processes in computer and user and
research each unfamiliar
3. run hijack this program
4. run spybot
5. upon start up use tcp-view and process viewer from sysinteral.com to see

One person made mention of this once when I had this problem on a sales

"If you have scripting enabled, it is possible that one of them is doing
this in the background.  Scripts can remain active after you have left
the page that started them.

Some PC programmers tend to use "busy waits" instead of calling a 
sleep() or hibernate() function.  This tends to kill performance on 
multiuser systems."

Optical mice also don't work well with certain colored pads and such. Make
sure you try
A different surface. 

Also of course clean the area very well. A piece of hair can cause problems.

Just some quick thoughts

thank you
Randall M

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]