Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 



Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > General Computer Security
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read


General Computer Security Get Help With System Security - This forum is not for malware removal assistance. For malware removal assistance, read the sticky topic at the top of the Virus/Trojan/Spyware Help forum, or the "First Steps" link at the top right of each page.

Reply
 
LinkBack Thread Tools
Old 04-10-2007, 09:02 PM   #1 (permalink)
Registered User
 
Join Date: Feb 2005
Posts: 90
OS: xp-me-98


RootkitRevealer

Hi All,
I ran RootkitRevealer tonite, as I do each week.
This is the first time it has ever displayed anything, and I'm not sure if it's something to be alarmed by so thought I'd post here where the Computer experts can help me out.

There were 2 entries identical:
path: HKLM/Security/Policy/Secrets/SAC


Size: 0


Description-Key name contains embedded null (*)

And the 3rd entry:

D: size 0: Error Mounting Volume

Don't have a clue what all this means. Any help would be greatly appreciated.

Thanks,
Marlene2
Marlene2 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Important Information
Join the #1 Tech Support Forum Today - It's Totally Free!

TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free.

Join TechSupportforum.com Today - Click Here

Old 04-11-2007, 12:48 PM   #2 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,449
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
Re: RootkitRevealer

Hi

I'm no expert when it comes to reading Rootkit logs, but if you did have a rootkit, entries would show up such as

C:\Documents and Settings\blah\blah 7/17/2006 4:44 PM 38.50 KB Hidden from Windows API.

I'm not sure exactly what the entries you posted mean, but I don't believe it's anything to worry about.
__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 04-11-2007, 02:58 PM   #3 (permalink)
Roaming To Help
 
Join Date: Nov 2006
Posts: 5,642
OS: Many


Quote:
Originally Posted by Marlene2 View Post
There were 2 entries identical:
path: HKLM/Security/Policy/Secrets/SAC
Size: 0

Description-Key name contains embedded null (*)
Are you sure the second one wasn't HKLM\Security\Policy\Secrets\SAI?

Those keys are legitimate, but their origins hadn't been confirmed by Rootkit Revealer developers last I spoke to them in November.

Nothing to worry about.
Kalim is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 04-11-2007, 03:35 PM   #4 (permalink)
Registered User
 
Join Date: Feb 2005
Posts: 90
OS: xp-me-98


Re: RootkitRevealer

Thanks for your replys! I went back in and started RootkitRevealer again today just to make sure I had the post correct and it does come up SAC.
It comes up almost immediately after it starts.

The pc seems to be running fine, so I'm taking your advise and am just not going to worry about it.

Thanks again!
This support forum is the BEST!
Marlene2
Marlene2 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 04-15-2007, 01:04 PM   #5 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,572
OS: 2000 Pro; XP Pro; XP Home


Re: RootkitRevealer

As Glaswegian and Kalim have pointed out, nothing to worry about:

http://forum.sysinternals.com/forum_...?TID=8881&PN=1
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Reply


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off




All times are GMT -7. The time now is 11:48 PM.



Copyright 2001 - 2009, Tech Support Forum
Home Tips Plus | Outdoor Basecamp | Automotive Support Forum

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85