OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: H C (keydet89yahoo.com)
Date: Fri Nov 09 2001 - 06:05:24 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Kevin,

    Seems you haven't received a response to this exact
    query since you posted it to Focus-Virus 2 months ago.

    > A file named logger_asserts.log has been appearing
    > on
    > the desktops in my office. It contains the following
    > information:
    >
    > 22:15:16 (1308, 1536), (1, 1, 33009), Info: Could
    > not
    > find resource DLL 'stringres'. Some strings may not
    > appear. Location:
    > M:\silib\slib\src\sresmanager.cpp,455 expr: retval
    > 22:36:55 (1308, 400), (1, 1, 33009), Info: Could
    > not
    > find resource DLL 'stringres'. Some strings may not
    > appear. Location:
    > M:\silib\slib\src\sresmanager.cpp,455 expr: retval
    >
    > All the machines are running either NT4 Workstation,
    > NT4 Server or Win2k Pro. All have McAfee ASaP or
    > VirusScan 4.5 installed and they find nothing. Any
    > ideas what might be causing this?
    > Thanks in advance . . .

    Well, to start, it looks as if it's some sort of
    compiler or linker problem. Do any of these systems
    have MSVC++ or any other development tools on them?

    You say that this file has been appearing on
    desktops...do you know that the MAC Times of the file
    are? The file should exist somewhere on the system,
    most likely in the directory that maintains the list
    of desktop icons or shortcuts. Also see if you can
    determine the owner of the file.

    When you get the MAC times of the file, do a search on
    the system for other files created around the same
    time. Perhaps FoundStone's 'afind.exe' (shout-out to
    JD Glaser on that one!!) from their Forensic Toolkit
    will help.

    Since you reported this two months ago, have you done
    any investigation into this? If so, please inform us
    of the steps you took and what you found...this might
    provide us with more information.

    Thanks,

    Carv

    __________________________________________________
    Do You Yahoo!?
    Find a job, post your resume.
    http://careers.yahoo.com