mailing list archives
RE: Help, possible rootkit
From: "RandallM" <randallm () fidmail com>
Date: Sun, 24 Oct 2004 16:41:21 -0500
From: "BillyBob" <billybobknob () hotmail com>
To: "Full Disclosure" <full-disclosure () lists netsys com>
Date: Sat, 23 Oct 2004 13:05:29 -0300
Subject: [Full-disclosure] Help, possible rootkit
I have noticed that my XP system is behaving like I have a rootkit.
-- -- --
1. Go directly to safe-mode
2. go to regedit and check start up processes in computer and user and
research each unfamiliar
3. run hijack this program
4. run spybot
5. upon start up use tcp-view and process viewer from sysinteral.com to see
One person made mention of this once when I had this problem on a sales
"If you have scripting enabled, it is possible that one of them is doing
this in the background. Scripts can remain active after you have left
the page that started them.
Some PC programmers tend to use "busy waits" instead of calling a
sleep() or hibernate() function. This tends to kill performance on
Optical mice also don't work well with certain colored pads and such. Make
sure you try
A different surface.
Also of course clean the area very well. A piece of hair can cause problems.
Just some quick thoughts
Full-Disclosure - We believe in it.
- RE: Help, possible rootkit, (continued)
- RE: Help, possible rootkit RandallM (Oct 24)