Penetration Testing mailing list archives

Re: [PEN-TEST] Suspect .EXE Trojan


From: Marty Richards <marty () netwaynetworks com au>
Date: Sun, 17 Dec 2000 18:57:43 +1100

If you have access to a Linux or other unix type box, the easiest way is to
run
'strings' on the file.  That will give you all the text information
contained
within it and would tell you any registry keys modified or files accessed
etc.

or you can cheat on the windoze platform and just open it in wordpad... ;)

Cheers,
Marty


Current thread: