Help, possible rootkit

From: BillyBob (billybobknob_at_hotmail.com)
Date: 10/23/04

  • Next message: Glenn Sieb: "Re: Help, possible rootkit" 
    To: "Incidents" <incidents@securityfocus.com>
Date: Sat, 23 Oct 2004 13:06:06 -0300

    I have noticed that my XP system is behaving like I have a rootkit.

    - My mouse is jumpy (it freezes for a second when I move it around the
    desktop) and the minimized Taskmanager in the systray shows I have around
    25 - 30 % usage, but when I open it, there is no process listed using this
    much.
    - I did a netstat, fport, openports and none of these show that I have any
    odd ports open or any connections established.
    - even when I disconnect from the Internet these symptoms do not stop. They
    stop if I reboot, but then start again.

    I have ran VICE, Klister, PatchFinder and RkDetect from rootkit.com and they
    could not find anything.

    Any more suggestions ?
    Any more rootkit finding tools for Windows ?

    Thanks
    Bill

  • Next message: Glenn Sieb: "Re: Help, possible rootkit"

    Relevant Pages

    • [Full-Disclosure] Help, possible rootkit
      ... I have noticed that my XP system is behaving like I have a rootkit. ... - My mouse is jumpy (it freezes for a second when I move it around the ...
      (Full-Disclosure)
    • Help, possible rootkit
      ... I have noticed that my XP system is behaving like I have a rootkit. ... - My mouse is jumpy (it freezes for a second when I move it around the ...
      (Security-Basics)
    • Re: Anti-virus, anti-spyware freezing in Win XP
      ... ran Avira overnight and it freezes when coming to C:\System Volume ... It claims to run rootkit checks before ... starting the virus check. ...
      (microsoft.public.windowsxp.security_admin)