Security Incidents mailing list archives
Help, possible rootkit
From: "BillyBob" <billybobknob () hotmail com>
Date: Sat, 23 Oct 2004 13:06:06 -0300
I have noticed that my XP system is behaving like I have a rootkit. - My mouse is jumpy (it freezes for a second when I move it around the desktop) and the minimized Taskmanager in the systray shows I have around 25 - 30 % usage, but when I open it, there is no process listed using this much. - I did a netstat, fport, openports and none of these show that I have any odd ports open or any connections established. - even when I disconnect from the Internet these symptoms do not stop. They stop if I reboot, but then start again. I have ran VICE, Klister, PatchFinder and RkDetect from rootkit.com and they could not find anything. Any more suggestions ? Any more rootkit finding tools for Windows ? Thanks Bill
Current thread:
- Help, possible rootkit BillyBob (Oct 24)
- Re: Help, possible rootkit Glenn Sieb (Oct 24)
- Re: Help, possible rootkit Harlan Carvey (Oct 24)
- Re: Help, possible rootkit Arias Hung (Oct 24)
- Re: Help, possible rootkit Marcus Merrin (Oct 24)
- RE: Help, possible rootkit Benjamin Tomhave (Oct 24)
- RE: Help, possible rootkit Leif Ericksen (Oct 25)
- <Possible follow-ups>
- Re: Help, possible rootkit Ralph W. Reid (Oct 24)
- RE: Help, possible rootkit Tony Langdon (ATC) (Oct 25)
- RE: Help, possible rootkit k levinson (Oct 25)
- RE: Help, possible rootkit Bowes, Ronald (EST) (Oct 25)