Re: a strange file

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2006-01-21 ragdelaed () gmail com wrote:
> also check your run key to see if there is anything weird in there.
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Unfortunately there are multiple locations for autostart items in
Windows. I'd recommend using at least something like Autoruns [1] or
Silent Runners [2].

[1] http://www.sysinternals.com/Utilities/Autoruns.html
[2] http://www.silentrunners.org/

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------