[pchelpers] Re: [pchelpers]

TSR's will change slightly as each file is loaded into memory, The file 
does not change but it may give a reading of a slight change as it is 
passed to memory. That is how the readme's for rootkitfinders go anyway.

Scott McNay wrote:

>
>TC> I got to thinking after I left that since your screen saver started
>TC> during the scan it may be  a false positive. When running rootkit 
>TC> revilevers nothing can run on the system at the same time because it is
>TC> reading even the slightest size change.
>
>Yes, very sensitive.  I wouldn't expect EXE files or other executables
>to change sizes, though.
>
>  
>

-- 
Gregory D. Watts
Poneyboy
http://www.tasana.biz
http://www.modestneeds.org



-- 
-------list-services-below-----------
Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig>
Freelists login at http://www.freelists.org/cgi-bin/lsg2.cgi
List archives at http://www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Latest news live feeds at http://modecideas.com/indexhomenews.htm?sig
Good advice is like good paint- it only works if applied.

Other related posts: