Hi, > Any ideas? I have not yet gone through the registry key by key, but have > done quite a few sorts to try and find suspicious executables accessed on > the date in question and have not yet found anything. haven't (consciously) seen this file extension myself yet, but could this be it? http://filext.com/detaillist.php?extdetail=WIP Installations like to create lots of files and delete them... Cheers, Jan ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Wed Jul 02 2003 - 04:49:32 PDT