realtime TRIPWIRE like software required

From: blackboab (blackboab_at_gmail.com)
Date: 10/21/05


Date: 21 Oct 2005 09:48:30 -0700

Hi

I recently got a trojan which copied itself to my disk, updated the
registry and
then copied itself into memory.

the anti virus software didnt blink,

there was nothing in the event log,

how come all of this can happen without windows informing me in any way
?

how come windows doesnt inform me if someone starts copying the files
from my disk ?

i want a realtime software (TRIPWIRE is not real time and must be run
at set intervals ) which will inform me when a file is being copied
to/from my system
and do i agree to let it happen.,

it should also prompt me before any changes to the registry are made.

where can i get such software ?



Relevant Pages

  • Re: realtime TRIPWIRE like software required
    ... > I recently got a trojan which copied itself to my disk, ... > the anti virus software didnt blink, ... > how come all of this can happen without windows informing me in any way? ... > it should also prompt me before any changes to the registry are made. ...
    (comp.security.misc)
  • Re: Recovery Console - dir and cd commands say "The path or file specified is not valid".
    ... Change the boot order in you BIOS to boot from the CD drive. ... I've never had to use the registry editing tools so ... > "STOP: c0000218 Unknown Hard Error> Dumping physical memory to disk: nn". ... and can I load the Recovery Console from an XP> Pro CD. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Recovery Console - dir and cd commands say "The path or file specified is not valid".
    ... > Change the boot order in you BIOS to boot from the CD drive. ... I've never had to use the registry editing tools so ... >> Dumping physical memory to disk: ... and can I load the Recovery Console from an XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Booting XP from external USB drive - change C drive?
    ... copy of the original registry. ... I know it doesn't boot from the USB drive. ... I am not quite sure what it should be on the external disk. ... :> market with at least one eSATA port). ...
    (microsoft.public.windowsxp.general)
  • Re: Adrress book questions
    ... manually editing a previously exported rules.reg file and stuffing ... don't know how to access the registry file on the old hard disk. ... All identities within a single Windows logon share a common WAB ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)