robdharana's Profile
Reputation: 0 Neutral
- Group:
- Members
- Active Posts:
- 3 (0 per day)
- Most Active In:
- RootKitty (3 posts)
- Joined:
- 03-July 07
- Profile Views:
- 975
- Last Active:
Jul 04 2007 02:29 AM- Currently:
- Offline
Topics I've Started
-
Hashing all files
Posted 3 Jul 2007
As far as I checked Rootbabe/Rootkitty don't use SeBackupPrivilege so it looks that they don't hash all files (eg. System Volume Information) because they lack permissions. So one solution is to run them as SYSTEM account or use pview from Reskit and enable this privilege before scanning. Anyone can check if for example the output file includes hashes for System Volume Information files?
My Information
- Member Title:
- Newbie
- Age:
- Age Unknown
- Birthday:
- Birthday Unknown
- Gender:
Contact Information
- E-mail:
- Private

Sign In
Register
Help

Find Topics
Find Posts