Re: Restoring WindowsXP SP2 Firewall service after malicious software attack


Hello!

After few days spent on investigating my system I have detected rootkit
presence with only one tool -> SVV by Joanne Rutkowska. All other tools
(I have tested dozens of them) have failed to do so. My only luck with
infection is that programmer who wrote or rather adapted rootkit made
some lousy job so I can see its presence by some very easy to spot
system behaviour abnormalities.

Seems that flattening the system and reinstalling it is coming closer
:).

.