Full Disclosure mailing list archives
RE: Help, possible rootkit
From: "RandallM" <randallm () fidmail com>
Date: Sun, 24 Oct 2004 16:41:21 -0500
Billy said: --__--__-- Message: 1 From: "BillyBob" <billybobknob () hotmail com> To: "Full Disclosure" <full-disclosure () lists netsys com> Date: Sat, 23 Oct 2004 13:05:29 -0300 Subject: [Full-disclosure] Help, possible rootkit I have noticed that my XP system is behaving like I have a rootkit. -- -- -- __ __ Billy, 1. Go directly to safe-mode 2. go to regedit and check start up processes in computer and user and research each unfamiliar 3. run hijack this program 4. run spybot 5. upon start up use tcp-view and process viewer from sysinteral.com to see connections One person made mention of this once when I had this problem on a sales laptop: "If you have scripting enabled, it is possible that one of them is doing this in the background. Scripts can remain active after you have left the page that started them. Some PC programmers tend to use "busy waits" instead of calling a sleep() or hibernate() function. This tends to kill performance on multiuser systems." Optical mice also don't work well with certain colored pads and such. Make sure you try A different surface. Also of course clean the area very well. A piece of hair can cause problems. Just some quick thoughts thank you Randall M _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: Help, possible rootkit, (continued)
- RE: Help, possible rootkit ISNYC (Oct 23)
- RE: Help, possible rootkit Alan Melia (Melmac) (Oct 23)
- Re: Help, possible rootkit Ali Campbell (Oct 24)
- Re: Help, possible rootkit Harry de Grote (Oct 25)
- Re: Help, possible rootkit BillyBob (Oct 23)
- Re: Help, possible rootkit Azerail (Oct 23)
- Re: Help, possible rootkit MN Vasquez (Oct 23)
- Re: Help, possible rootkit MN Vasquez (Oct 23)
- Re: Help, possible rootkit Gregh (Oct 23)
- RE: Help, possible rootkit Alan Melia (Melmac) (Oct 25)
- RE: Help, possible rootkit RandallM (Oct 24)