Re: Help, possible rootkit

From: Ralph W. Reid (rreid_at_sunset.net)
Date: 10/24/04

  • Next message: Harlan Carvey: "Re: Help, possible rootkit" 
    Date: Sun, 24 Oct 2004 13:10:07 -0700
To: incidents@securityfocus.com

    This kind of intermittent behavior _might_ indicate that a piece of
    hardware in your system is getting flakey on its way to failure. I
    have seen an HPUX and a LINUX system behave similarly when hardware
    involved with hard drives and hard drive control began to fail. Some
    one who has seen a hardware failure on a system with your OS may be
    able to shed more light on this kind of problem for you. HTH.

    On Sat, Oct 23, 2004 at 01:06:06PM -0300, BillyBob wrote:
    > I have noticed that my XP system is behaving like I have a rootkit.
    >
    > - My mouse is jumpy (it freezes for a second when I move it around the
    > desktop) and the minimized Taskmanager in the systray shows I have around
    > 25 - 30 % usage, but when I open it, there is no process listed using this
    > much.
    > - I did a netstat, fport, openports and none of these show that I have any
    > odd ports open or any connections established.
    > - even when I disconnect from the Internet these symptoms do not stop. They
    > stop if I reboot, but then start again.
    >
    > I have ran VICE, Klister, PatchFinder and RkDetect from rootkit.com and they
    > could not find anything.
    >
    > Any more suggestions ?
    > Any more rootkit finding tools for Windows ?
    >
    > Thanks
    > Bill
    >
      

    -- 
Ralph.  N6BNO.  Wisdom comes from central processing, not from I/O.
rreid@sunset.net  http://personalweb.sunset.net/~rreid
Opinions herein are either mine or they are flame bait.
COTAN (x) = COS (x) / SIN (x)
  • Next message: Harlan Carvey: "Re: Help, possible rootkit"

    Relevant Pages

    • Re: Replace Mobo in XP??
      ... > hardware than that it was originally installed upon. ... > The concerns with your conclusion is that you know when the failure is ... This has everything to do with FAST failure recovery and also just hardware ... > data replacement to do a repair installation and move on with life. ...
      (microsoft.public.windowsxp.hardware)
    • Re: Replace Mobo in XP??
      ... > hardware than that it was originally installed upon. ... > The concerns with your conclusion is that you know when the failure is ... This has everything to do with FAST failure recovery and also just hardware ... > data replacement to do a repair installation and move on with life. ...
      (microsoft.public.windowsxp.general)
    • Re: Replace Mobo in XP??
      ... hardware than that it was originally installed upon. ... > presence/absence of ACPI mobo BIOS. ... > on any XP system so that failure recovery on new hardware is more ... The concerns with your conclusion is that you know when the failure is going ...
      (microsoft.public.windowsxp.hardware)
    • Re: Replace Mobo in XP??
      ... hardware than that it was originally installed upon. ... > presence/absence of ACPI mobo BIOS. ... > on any XP system so that failure recovery on new hardware is more ... The concerns with your conclusion is that you know when the failure is going ...
      (microsoft.public.windowsxp.general)
    • Re: Genesis g-switch installed upside down
      ... "one off" hardware that's never flight tested as a *system* before its ... first, and only, operational flight. ... This is the class of failure that did in the NOAA N-Prime satellite on ... The TOC adapter plate was not secured to the TOC because the ...
      (sci.space.shuttle)