Security Basics mailing list archives

Re: Re: Hacked again???


From: s.omahony () ucc ie
Date: 16 Jun 2005 22:12:31 -0000

Hi,

use the following to get a detailed view of whats being run at startup;
http://www.sysinternals.com/utilities/autoruns.html

This can be countered by the use of a rootkit - to check to that use;
http://www.sysinternals.com/Utilities/RootkitRevealer.html

Good paper at;
http://www.ucl.ac.uk/cert/win_intrusion.pdf

Sean


Current thread: