OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Ben Greenbaum (bgreenbaumsecurityfocus.com)
Date: Tue May 15 2001 - 14:51:43 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Just because a program has the same name however does not mean it is the
    same thing. If something about the file is suspicious, you should compare
    it to a known good copy of the program. A well-known trick is to rename
    hacking tools to the names of system programs to avoid suspicion...

    Ben Greenbaum
    Director of Product Development - SIA/VulDB
    SecurityFocus
    http://www.securityfocus.com

    On Mon, 14 May 2001, Brad Judy wrote:

    > >From MS KB article Q194396 (regarding the failure of an mdm DLL):
    >
    > "Mdm.exe is the Machine Debug Manager, which is used by the Windows NT
    > Option Pack and Microsoft Developer Studio to provide application debugging.
    > When Script Debugging is enabled for Internet Explorer 4.0, the debug
    > manager is initialized whenever Internet Explorer 4.0 is started."
    >