Re: Unusual registry entries

From: Brad <gryphonn(at)austarnet.com.au>
Date: Thu Jun 19 2003 - 23:25:12 EDT

On 19 Jun 2003 at 20:14, btraquer@att.net wrote:

From:           	btraquer@att.net
To:             	incidents@securityfocus.com
Subject:        	Unusual registry entries
Date sent:      	Thu, 19 Jun 2003 20:14:35 +0000

> Today, while installing an app on a 98 box, we noticed that the user name and

Virus search results (minimal search):

http://www.f-secure.com/v-descs/vcl.shtml http://www.avp.ch/avpve/newexe/windows/redteam.stm

Note that besides the Redteam kit, the worm itself is rather old.

How much do you know of the history of the box, because the entries may have been there for a while.

Cheers,
Brad

>
> No unusual apps/processess "appear" to be installed/running and nothing unusual

Gryphonn Design
Custom Computers
Anti-virus and Security services
E: gryphonn@austarnet.com.au

This message has a short disclaimer.
It is designed to piss off those people
who think 134 bytes of ASCII
is a waste of bandwidth.

---

Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the world's premier technical IT security event! 10 tracks, 15 training sessions, 1,800 delegates from 30 nations including all of the top experts, from CSO's to "underground" security specialists. See for yourself what the buzz is about! Early-bird registration ends July 3. This event will sell out. www.blackhat.com

---

Received on Sat Jun 21 14:57:00 2003