[papagresh]

pcuser,

I really did flip a coin about whether or not to start a new thread, and I'm still not sure I should -- but here goes ...

I've read enough here to know that Rootkitty [a] has some issues [b] you are aware of that and [c] it is on the back burner for now and not a priority item. Just wanted to start out by acknowledging all that and saying up front that I'm fine with it.

Also wanted to add my "symptoms" to the KB to hopefully assist you if and when you once again turn your attention to Rootkitty, to wit:

When doing a complete scan of C:\, Rootkitty creates a Win-Files.txt that is over 27Mb and contains 415k lines with hashes, but it fails to list C:\Windows or any subdirectories of C:\Windows. I'm not sure if anything else is getting skipped.

When doing the PE scan, it skips several of the subdirs in my C:\Archives folder, skips most of C:\Program Files and continues until it gets to my C:\Windows folder, which it lists (!?) until it encounters C:\Windows\Tasks\SA.DAT -- at which point it bails out, leaving a PE-Files.txt of about 81Kb and 14k lines, with *no* hashes. The saved log is 0 bytes.

I re-ran the PE scan and it is repeatable -- I haven't re-ran the Win scan, owing to my own time constraints.

Again, my purpose here is to provide feedback, not whine for a fix. It'll shine when it shines ... ":^)