Re: SYMANTEC doesn't detect TROJAN, !!WARNING TROJAN ATTACHED!! - first_3sum.wri (0/1)

From: NormanM (my.aren't@we.nosy.invalid)
Date: 12/27/02


From: NormanM <my.aren't@we.nosy.invalid>
Date: Fri, 27 Dec 2002 06:00:27 GMT

On Thu, 26 Dec 2002 22:01:23 -0800, Hunter Watson <djgka876@keocm.net>
wrote:

>I am concerned because after the restore operation
>"ms spool32.exe" is no longer in the Windows folder but
>the 2 .DAT files are. Is there another file on my HD that puts
>"ms spool32.exe" in the windows folder? And why does
>"ms spool32k.dat" contain the info that was there before I deleted it?
>The info seems to be stored somewhere else. Is there a key logger
>program lurking on my HD or is it contained in "ms spool32.exe".

AFAIK, Windows Restore only changes system files to an earlier restore
point without altering user data files. Since any file with the .dat
extension is a user file, it should not be either changed, or deleted
by running System Restore.



Relevant Pages

  • Re: Question on best practices for server backups
    ... If you plan to re-install Windows and then recover the server to a previous ... state you will need to restore the Windows folder as well as System State, ... space on one of our client's backup media/tape. ...
    (microsoft.public.windows.server.general)
  • Re: Backup of DC - windows 2003
    ... What good is the Windows folder without the rest of the drive's contents? ... WE do have two domain controllers in the same physical location. ... restore SS based on the backup. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Desktop screens gone...
    ... -Does your Recycle Bin still contain the deleted files? ... explorer.exe file into the Windows folder. ... -Try using 'System Restore' to a date before the problem ... > this was before I knew about microft's spyware program download) It ...
    (microsoft.public.windowsxp.general)
  • Re: XP Pro system restore blocked by malware
    ... >>> systematically tried every restore point I had. ... >>> The folder causing me all this heartache is in the windows folder and ... >>> refuses ...
    (microsoft.public.windowsxp.basics)
  • Re: Problem with DAT file type
    ... Click the Restore button to restore the defaults. ... The Restore button is there for .dat files because you or a program changed ... The problem is that the DAT extension should open with Notepad and it does ... In the tab File Types, Registered file types: ...
    (microsoft.public.windowsxp.configuration_manage)