Sign in with
Sign up | Sign in
Your question

Strange Permissions, services.exe, possible rootkit.

Last response: in Windows 7
December 4, 2012 9:51:08 PM

Recently I've encountered problems with what I think may be a rootkit. I've been having heating issues with my GPUs, they reach 60c on idle, and going around a few forums, I've noticed a services.exe in a few different places and a strange user, HomeUsers, who is not inherited and has special permissions which apply to "this folder only". When I go into change permissions, the option is greyed out. Anti-virus isn't picking anything up (McAfee) and a check disk showed nothing. Do I have a rootkit, and if so, what can I do?
December 4, 2012 10:44:57 PM

Weird. All I can say is, permissions CAN be "greyed-out", indicating they are inherited from the parent folder.
December 5, 2012 1:35:50 AM

Run a scan with GFI/VIPRE and see what it picks up.
Also, try malware detection/removal software after booting in safe mode.

If you think you have a rootkit I'd just re-image from your last Clonezilla snapshot. (Assuming you keep backups).