Full Disclosure mailing list archives

Re: Where to submit a suspected trojan or virus?


From: Harlan Carvey <keydet89 () yahoo com>
Date: Fri, 3 Sep 2004 11:13:54 -0700 (PDT)


I  found an explorer.exe in my system32 folder
which I believe take
precedence over the real explorer.exe located in
c:\windows.

The fact that there's a copy of this Explorer.exe in
System32 may be an issue.

Was there an application running?  Was there a
Registry entry related to this file?  If so, which
one?  How about another autostart location?

What do you mean by "I believe take precedence over
the real explorer.exe"?  how so?

There may be enough information associated with this
file such that you may not need to submit it to
anyone...there are things you can do to figure out
what the file is...

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: