Penetration Testing mailing list archives

Re: [PEN-TEST] Suspect .EXE Trojan


From: outcast <outcast () OUTCAST WS>
Date: Thu, 14 Dec 2000 15:22:19 -0500

http://www.vmware.com

On Thu, 14 Dec 2000, Ruso, Anthony wrote:

Hi,

I have a suspect executable that I think may be a Trojan. A search on the
.exe doesn't return any result with any virus vendor. Are there any tools
that would allow me to execute the file in isolation and actually see what's
going on. The file was already executed on two workstations and it killed
Outlook in both cases. I know I can use tripwire and similar products to see
what files it makes changes to but I don't want to risk killing outlook
again.

Thanks

Anthony Ruso



Current thread: