Any ideas on how I identify the attached root kit SID?

If it was a real one instead of {9DBEDA52-BB0A-DA11-07E5-3B2BEE030000} you would just gurgle it. But because CLSIDs are basically [registered] tags the kit probably set a matching one in your \software\classes\CLSID from which to hook some data that it wanted.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.