full-disclosure - Re: suspicion of rootkit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <28360.1342039873@turing-police.cc.vt.edu>
Date: Wed, 11 Jul 2012 16:51:13 -0400
From: valdis.kletnieks@...edu
To: phocean <0x90@...cean.net>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: suspicion of rootkit

On Wed, 11 Jul 2012 22:42:42 +0200, phocean said:
> I have a lab virtual machine that behaves as if it was owned by a
> rootkit: weird behavior with system certificates and keyboard driver.

Out of curiosity, why are you guessing it's a rootkit, rather than just another
case of Windows being messed up and needing fixing?

What release of Windows?  When did it start misbehaving?  Was that
anytime near Patch Tuesday?

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/