RE: Weird Profile in Documents and Settings

Possible file corruption or someone attempting to exploit an unpatched hole.

First, get properties on the C drive and do an error check. Check in both boxes and let it reboot to perform the scan. You should be using NTFS for the filesystem. If not, I encourage you to convert unless you have a reason for sticking with FAT.

Second, Go to windows update and make sure you have all the critical updates installed.

Third, install hfnetchklt (shavlik.com) and run a scan on your computer, suppressing notes and warnings. Install any patches it complains about. Make sure you redownload the patches since MS updates them on occasion.

-Lucas

-----Original Message-----

From: Greg Wiedeman [mailto:gswcentral@attbi.com] Sent: Thursday, February 20, 2003 5:38 AM To: incidents@securityfocus.com
Subject: Weird Profile in Documents and Settings

I have an incident where in the documents and settings in windows 2000 I

have a profile show up under a number of systems where the name of the

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

folder shows up as 3 squares. I don't know where it came from but it

appears on my workstations and my servers. I don't know what it is. Does

anyone know anything that would make this profile???? I have done virus

scans and trojan scans along with scumware scans but all turn up negative.

Thanks

Do you know the base address of the Global Offset Table (GOT) on a Solaris 8 box?
CORE IMPACT does.
www.securityfocus.com/core

Do you know the base address of the Global Offset Table (GOT) on a Solaris 8 box?
CORE IMPACT does.
www.securityfocus.com/core Received on Fri Feb 21 18:16:59 2003