🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Thread View: microsoft.public.windows.tabletpc
1 messages
1 total messages Started by Juan I. Cahis Fri, 07 Jul 2006 19:06
Strange behavior of a new X41 TabletPC, Rootkit installed by Lenovo-IBM?
#6
Author: Juan I. Cahis
Date: Fri, 07 Jul 2006 19:06
40 lines
3120 bytes
Dear friends:

I cannot create a MININT directory on C:\, I always get the "Access
denied" message. I use WinXP Pro (TabletPC) with SP2, and C: is
formatted with NTFS. My account has full Administrator privileges. I
have all the files unhidden. Also, I disabled any antivirus and any
other protection software.

I gave full access rights to EVERYONE for C:\, and the problem was the
same. I didn't have any problem, however creating any folder in C:\
with *another* name, or creating MININT in another folder than C:\

Please note that the problem is that *nobody* can create a folder
called MININT in C:\, even if you try to create it through a cmd.exe
window or through Windows Explorer.

I could circumvent the problem creating a directory called MININT0 on
C:\, then booting in Safe Mode, and then renaming it to MININT and
copying all the needed files into it, but now, when I am in normal
mode XP again, I cannot see MININT's contents.

As I could create the MININT folder without any problem when booting
in Safe Mode, I assume that there is some driver or service installed
by Lenovo-IBM that originates the problem. If you boot in Safe Mode,
this driver or service is not running.

But today, I ran Sysinternal's (Mark Russinovich's) Rootkit Revealer
for the first time in my X41-TP, and the whole MININT folder (and all
of its contents) was marked as a possible rootkit because it is
"hidden from Windows API".

My PC is an absolutely new IBM-Lenovo X41 TabletPC. Does Lenovo-IBM
install a Rootkit on their PCs that load when Windows starts in Normal
Mode? Is this a similar case of Sony's?

Any hint?
Thanks
Juan I. Cahis
Santiago de Chile (South America)
Note: Please forgive me for my bad English, I am trying to improve it!
Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads