Re: Odd typing in MSWord

["Jay D. Dyson" <jdyson () treachery net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 4 Mar 2005, Federated Information Security wrote:

> the only thing I found was a seemingly encrypted file on the root of c:\ 
> called "comply.ini", which isn't normal for our config, but may not be 
> related.

	The 'comply.ini' file seems legitimate, though its location is 
unusual.  Typically, comply.ini holds configuration data to assure 
compliance with BlackICE.

        RealSecure Agent Advanced Administration Guide
        http://documents.iss.net/literature/BlackICE/BI-AAG_70.pdf

        See also:
        http://research.pestpatrol.com/Analyses/2004-11-27_114355.asp

> Anyone run across anything similar lately, or have any suggestions?

	Sounds like something got fat-fingered and possibly initiated a 
repulsively titanic paste into your Word document.  Shut down the system, 
bring it up in safe mode and scan the system from read-only media with the 
latest data file of your favorite anti-virus/anti-spyware software.

	If everything comes up green after doing that, just chalk it up to 
the canonical gremlins of yesteryear and have a nice day.

- -Jay

  (    (                                                        _______
  ))   ))   .-"There's always time for a good cup of coffee"-.   >====<--.
C|~~|C|~~| (>----- Jay D. Dyson -- jdyson () treachery net -----<) |    = |-'
 `--' `--'  `-I just started World War III.  You're welcome.-'  `------'

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (TreacherOS)
Comment: See http://www.treachery.net/~jdyson/ for current keys.

iD8DBQFCKMebBYoRACwSF0cRArc6AJ49yFi9VLO3FFcSn2nwgxuIHJJpGgCgg5lp
OVaCA1O5STDazHH3coRmc9E=
=N/9s
-----END PGP SIGNATURE-----