Re: NT/IIS Decoy

From: Qazi M.M. Ahmed (qaziahmedat_private)
Date: Wed Dec 12 2001 - 08:03:43 PST

  • Next message: Thad Horak: "SMBRelay issues"

    You can disable Windows File Protection (and enable it again) in Windows 
    2000 by editing registry keys. A hex editor will do the rest for w3svc.dll
    
    You can find details about Windows File Protection (how to 
    enable/disable etc) here:
    
    http://www.microsoft.com/hwdev/driver/sfp/wfp.asp
    
    For XP Windows File Protection, you have to edit the file:
    
    %systemroot%\system32\restore\filelist.xml
    
    Add the filename in the exclude section to disable protection for the 
    specific file.
    
    Qazi M.M. Ahmed
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Wed Dec 12 2001 - 12:00:45 PST