Full Disclosure mailing list archives
Re: Help, possible rootkit
From: "Gregh" <chows () ozemail com au>
Date: Sun, 24 Oct 2004 14:36:13 +1000
----- Original Message ----- From: "MN Vasquez" <mnv () alumni princeton edu> To: <full-disclosure () lists netsys com> Sent: Sunday, October 24, 2004 1:04 PM Subject: Re: [Full-disclosure] Help, possible rootkit
I don't know about the rest of the list, but I haven't seen or heard of too many process hiding xp rootkits that are undetectable by some of the basic methods mentioned.
Just FYI of anyone really interested in why a mouse is doing odd things since installing SP2 on XP, it is actually more common than you think and in what I have seen to date (which is, by no means, long enough to be 100% sure) limited to USB mouse users on XP using SP2. Put the mouse up the top quarter of the screen near the right hand edge and almost always, the user's pointer drifts left. Revert to SP1 and it doesn't happen. I haven't looked for a fix as yet but I suspect it is either just a mouse driver reinstall or an update needed. Note - for the paranoid, I don't claim this as the answer in every case. It has been what has happened on about 30 I have seen so far. Doesn't appear to affect a PS2 port mouse. Greg. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Help, possible rootkit, (continued)
- Re: Help, possible rootkit Michael Rutledge (Oct 23)
- RE: [inbox] Re: Help, possible rootkit Exibar (Oct 23)
- RE: Help, possible rootkit ISNYC (Oct 23)
- RE: Help, possible rootkit Alan Melia (Melmac) (Oct 23)
- Re: Help, possible rootkit Ali Campbell (Oct 24)
- Re: Help, possible rootkit Harry de Grote (Oct 25)
- Re: Help, possible rootkit BillyBob (Oct 23)
- Re: Help, possible rootkit Azerail (Oct 23)
- Re: Help, possible rootkit MN Vasquez (Oct 23)
- Re: Help, possible rootkit MN Vasquez (Oct 23)
- Re: Help, possible rootkit Gregh (Oct 23)
- RE: Help, possible rootkit Alan Melia (Melmac) (Oct 25)
- Re: Help, possible rootkit Michael Rutledge (Oct 23)
- RE: Help, possible rootkit RandallM (Oct 24)