Security Incidents mailing list archives

Re: Weird Profile in Documents and Settings


From: Gene Yoo <gyoo () attbi com>
Date: Thu, 20 Feb 2003 19:34:40 -0800

Greg Wiedeman wrote:

I have an incident where in the documents and settings in windows 2000 I have a profile show up under a number of systems where the name of the folder shows up as 3 squares. I don't know where it came from but it appears on my workstations and my servers. I don't know what it is. Does anyone know anything that would make this profile???? I have done virus scans and trojan scans along with scumware scans but all turn up negative. Thanks

----------------------------------------------------------------------------

Do you know the base address of the Global Offset Table (GOT) on a Solaris 8
box?
CORE IMPACT does.
www.securityfocus.com/core




i've seen the same thing at my home PC to find out that a folder was copied over from a disk that was saved under a different language (asian). since i didn't have the MS Global IME for the language, it came out as a multiple blocks (three to be exact as you mentioned)... go figure.


--
<<gyoo [at] attbi [dot] com>>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iQCUAwUBPhxERRxoVYCzmrKXAQJK5gP3Y7CTsFyKpEz2p5W4GWI9+qSm+kWfdJ0R
xNlma0Ma9rAL/OBJcZMo5IXyXas+3Edogbv4Al6dIf8lot1WS0Iaxxl/cg2f7gf+
otf7LfNpZDE/6OzR7A1qN6baPMLSjGzywwQWMfSVuWWb6kGQxMsA13Kn68G7Ozxs
5CODZqUPyg==
=AolA
-----END PGP SIGNATURE-----



----------------------------------------------------------------------------

Do you know the base address of the Global Offset Table (GOT) on a Solaris 8
box?
CORE IMPACT does.
www.securityfocus.com/core



Current thread: