Penetration Testing mailing list archives

services.exe modifying synattackprotect?


From: techlists () comcast net
Date: Thu, 9 Dec 2010 17:23:27 +0000 (UTC)

Why would 'C:\Windows\system32\services.exe' be trying to change the following registry key?

\REGISTRY\MACHINE\SYSTEM\ControlSet\SERVICES\TCPIP\PARAMETERS\SYNATTACKPROTECT

Is this an indication of an attack or a normal part of the 'services.exe' process?

PG 

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


Current thread: