[Dshield] Strange Windows Behavior

Jon R. Kibler Jon.Kibler at aset.com
Tue Jan 23 18:12:11 GMT 2007

Deb Hale wrote:
> Jon,  Go to the cmd prompt on the machine.  Go to the windows\system32
> directory and do an attrib *.* |more.  Look at the files that are marked
> hidden and/or system.  You may find the culprit hiding under a different
> name.

Already checked -- just forgot to mention it. Unless it is an ADS (and I would thought that RootKitRevealer would have found that!), I see no unusual hidden/system files. I also ran sfc and it did not hit on anything.

Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214

Filtered by: TRUSTEM.COM's Email Filtering Service
No Spam. No Viruses. Just Good Clean Email.

More information about the list mailing list