Re: [PEN-TEST] Suspect .EXE Trojan

[Rainer Duffner <duffner () FH-KONSTANZ DE>]

On Thu, 14 Dec 2000, Ruso, Anthony wrote:

> Hi,
>
> I have a suspect executable that I think may be a Trojan. A search on the
> .exe doesn't return any result with any virus vendor. Are there any tools

VMWare.
It has a feature to write a "redo-log" for the filesystem.
Not your everyday el-cheapo solution, though.

Would filemon and regmon from www.sysinternals.com be usefull ?
Is there a way to intercept them ?
I don't know.

cheers,
Rainer
--
========================================
 Rainer Duffner , Konstanz, Germany
 eMail:  duffner () fh-konstanz de
       rainer.duffner () surf24 de
http://www-stud.fh-konstanz.de/duffner/
========================================