Re: [PEN-TEST] Suspect .EXE Trojan

[Frank Knobbe <FKnobbe () KNOBBEITS COM>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> -----Original Message-----
> From: Ben Ford [mailto:bford () TALONTECH COM]
> Sent: Thursday, December 14, 2000 6:46 PM
>
> If you have access to a Linux or other unix type box, the
> easiest way is to run
> 'strings' on the file.  That will give you all the text
> information contained
> within it and would tell you any registry keys modified or
> files accessed etc.


strings is also available from Sysinternals.com for Win32. It lists
ASCII and Unicode strings.

Regards,
Frank

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.1
Comment: PGP or S/MIME encrypted email preferred.

iQA/AwUBOjl/JkRKym0LjhFcEQJHegCgxuQ/tm0BqUUWg4VSF/rOInBwXc8AoKGt
ETZLBwnyZeJf3bId6HVxEjVH
=CUXT
-----END PGP SIGNATURE-----