[Dshield] Strange Windows Behavior

Jon R. Kibler Jon.Kibler at aset.com
Tue Jan 23 18:12:11 GMT 2007


Deb Hale wrote:
> 
> Jon,  Go to the cmd prompt on the machine.  Go to the windows\system32
> directory and do an attrib *.* |more.  Look at the files that are marked
> hidden and/or system.  You may find the culprit hiding under a different
> name.
> 

Already checked -- just forgot to mention it. Unless it is an ADS (and I would thought that RootKitRevealer would have found that!), I see no unusual hidden/system files. I also ran sfc and it did not hit on anything.

Jon
-- 
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.



More information about the list mailing list