Re: [PEN-TEST] Suspect .EXE Trojan

[Nexus <nexus () PATROL I-WAY CO UK>]

Hi folks,

Not just for *NIX users ;-)
http://www.foundstone.com/resources/tools.html for BinHex3, or
http://www.sysinternals.com/misc.htm for strings.

Regards,
            JJ


----- Original Message -----
From: "Ben Ford" <bford () TALONTECH COM>
To: <PEN-TEST () SECURITYFOCUS COM>
Sent: Friday, December 15, 2000 12:46 AM
Subject: Re: Suspect .EXE Trojan


> If you have access to a Linux or other unix type box, the easiest way is
to run
> 'strings' on the file.  That will give you all the text information
contained
> within it and would tell you any registry keys modified or files accessed
etc.
[snip]

____________________________________________
http://1cis.com
Free E-mail Servers with unlimited mailboxes
1st Class Internet Solutions