Ethical Hacking Training at InfoSec Institute Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Amlafvc.exe? |
|---|---|
| Date: | Mon, 15 Nov 2004 08:48:36 -0500 |
Ok, I have a machine that has this program running under any user that logs into the machine. This process spawns anywhere from 1- 10 times, and uses up to 60% of the Processor... Antivirus found nothing(on the machine and from a web version), Spybot found nothing, And all web searches prove useless. I cannot terminate it as it spawns and vanishes constantly changing the process ID.. It is listed in the registry as Microsoft Update machine. BUT there is nothing on the Microsoft website about it. And is is located in the windows\system32 folder as an EXE file and a folder called c:\windows\prefetch as a .pf file. It sounds like it may be a Microsoft component, but I just do not know.. It is not on 3 other Windows XP machines in the office.. The system is running SP1 IDEAS? Thanks, Jim ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: mactimes - not reliable., icathar |
|---|---|
| Next by Date: | RE: MD5 Collisions and Evidence Integrity, Svein Yngvar Willassen |
| Previous by Thread: | Re: mactimes - not reliable., icathar |
| Next by Thread: | RE: Amlafvc.exe?, Robert J. Wright |
| Indexes: | [Date] [Thread] [Top] [All Lists] |