Questions tagged [rootkit]
Rootkits are programs designed to hide malicious activity on a compromised computer by hiding files, processes or registry entries.
16
questions with no upvoted or accepted answers
2
votes
1
answer
1k
views
My computer gives a known virus warning and reboots
"Windows must now restart because the Plug and Play service terminated
unexpectedly."
"Windows must now restart becasue the DCOM Server Process launcher
service terminated unexpectedly."
...
- 21
1
vote
0
answers
203
views
rkhunter Apache2 Warning caused by phpmyadmin-Docker-Container
recently we get the following reports from rkhunter:
Warning: The following processes are using suspicious files:
Command: apache2
UID: 33 PID: 11286
Pathname:
Possible ...
- 11
1
vote
1
answer
563
views
Can rootkits and malwares affect a live ubuntu usb with no peristence?
Can rootkits and malwares affect a live ubuntu usb with no peristence ? Can any malware possibly persist and affect all the sessions ? Also, can it affect current session if it cannot persist ? I am ...
- 51
1
vote
0
answers
166
views
Is this malware?
I have a machine running Linux Mint (qiana). I noticed it was often slow and when I looked at top I found
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND ...
1
vote
0
answers
2k
views
EFI partition malware?
I have a 2011 Macbook Pro, running 10.8.2 and was worried that the laptop may have been tampered with while left unattended for a few days while abroad in Asia.
I have mounted my EFI partition using:
...
1
vote
0
answers
2k
views
is it possible to monitor dll injection events on Windows, such as to detect user mode rootkits?
wikipedia article's section on user mode rootkits is not quite clear about the mechanism of injecting code into running processes. Does this take advantage of normal OS functionality and so could be (...
1
vote
2
answers
619
views
Examples of usable rootkits
I'm trying to learn more about rootkits and was hoping to take one and let it loose in a virtual environment.
Does anyone know of a rootkit currently available that I can safely use to do this, and ...
- 111
0
votes
1
answer
273
views
Are these false positives on this rkhunter log on linux?
I'm running Manjaro Linux with xfce,
I googled how to use the program and ran these commands to check for rootkits.
sudo rkhunter --update
sudo rkhunter --propupd
sudo rkhunter --check
But I'm not ...
- 1
0
votes
0
answers
367
views
Possibly Malicious code execution on startup
Checked my event viewer to see if my system was starting any funny commands. This is due to the fact i noticed a sudden slowdown on my pc after startup.
Im wondering if an event like this is normal; ...
- 9
0
votes
2
answers
110
views
I am getting a weird error, should I be worried ? The error has weird characters and says "fatal javascript error occured"
Here is the error below. I accidentally deleted some files so I am just curious if this is a virus.
- 1
0
votes
0
answers
117
views
Isolate (secure) multiple boot images from harming my PC
Is it possible to protect my bare-metal from compromise, so that I can be fairly confident that (for example) restoring a VHDX system image every month keeps me clean? If so, how?
I'm building a ...
- 101
0
votes
0
answers
602
views
Chkrootkit False Positive?
After setting up a fresh Kali system in VB I decided to do a chkrootkit to check the filesystem. Chkrootkit identified a lot of suspicious files. Is this a false positive or something to be concerned ...
- 11
0
votes
0
answers
18k
views
What is ".HFS+ Private Directory Data" and why is it SO BIG?
I’m recovering this old disk I accidentally formatted, and stumbled across a hidden and HUGE folder of questionable origin.
I can plainly see the folder’s contents thru a data rescue program. By ...
- 1,701
0
votes
1
answer
696
views
OS X Rootkit Hunter 0.2 - Results - Help interpreting
maybe someone can help me makes sense if these scan results are something to be worried about and if so, how to fix them. I seems that I do not have any viruses (check with Sophos AV) or rootkits, but ...
- 81
0
votes
0
answers
111
views
Rootkit I can not find.
I am running windows 7 ultimate. Chrome Browser. and advance system care. I have run every malware scanner I can find and all the rootkit scanners as well. Nothing seems to be able to find this thing. ...
- 109
-1
votes
1
answer
507
views
How to remove Autodesk Access "rootkit"?
I installed some (paid) Autodesk products at a point (institutional access, got the license for free) and installed all the software products that come with that including Autodesk Access. When I ...
- 375