full-disclosure - [inbox] Re: Help, possible rootkit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <NMEAJDJMDLJLOIOCIKJJKEIAFKAA.exibar@thelair.com>
From: exibar at thelair.com (Exibar)
Subject: [inbox] Re: Help, possible rootkit

Perhaps is a piece of spyware and not a rootkit afterall?  Spyware would be
a more common item to find on a computer system than a rootkit.  Run
Spoybot: search and destroy and Adaware on your machine.

  How up to date is your Antivirus as well?  Did you run a full antivirus
scan on your system to rule out a virus?

  Exibar

> -----Original Message-----
> From: Michael Rutledge [mailto:michael4447@...il.com]
> Sent: Saturday, October 23, 2004 1:11 PM
> To: BillyBob
> Cc: Full Disclosure
> Subject: [inbox] Re: [Full-Disclosure] Help, possible rootkit
>
>
> What type of software do you use on a regular basis, and what software
> have you installed recently?  Is this a new install of XP?  Also, have
> you installed SP2?
>
> Give us a little background about your system so that we can rule out
> common software gliches.
>
> -Michael
>
>
> On Sat, 23 Oct 2004 13:05:29 -0300, BillyBob
> <billybobknob@...mail.com> wrote:
> > I have noticed that my XP system is behaving like I have a rootkit.
> >
> > - My mouse is jumpy (it freezes for a second when I move it around the
> > desktop) and the minimized Taskmanager in the systray shows I
> have around
> > 25 - 30 % usage, but when I open it, there is no process listed
> using this
> > much.
> > - I did a netstat, fport, openports and none of these show that
> I have any
> > odd ports open or any connections established.
> > - even when I disconnect from the Internet these symptoms do
> not stop.  They
> > stop if I reboot, but then start again.
> >
> > I have ran VICE, Klister, PatchFinder and RkDetect from
> rootkit.com and they
> > could not find anything.
> >
> > Any more suggestions ?
> > Any more rootkit finding tools for Windows ?
> >
> > Thanks
> > Bill
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
> >
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>
>
>