Wednesday, December 21, 2005

ID Theft? Using a rootkit approach? Not here, man.

12/21/05 20:31:43 [Info]: BlackLight Engine 1.0.30 initialized
12/21/05 20:31:43 [Info]: OS: 5.0 build 2195 (Service Pack 4)
12/21/05 20:31:44 [Note]: 7019 4
12/21/05 20:31:44 [Note]: 7005 0
12/21/05 20:31:50 [Note]: 7006 0
12/21/05 20:31:50 [Note]: 7011 1684
12/21/05 20:31:54 [Note]: FSRAW library version 1.7.1014
12/21/05 20:31:57 [Info]: Hidden file: C:\WINNT\DFSLKI5A.O9U
12/21/05 20:31:57 [Note]: 7002 0
12/21/05 20:31:57 [Note]: 7003 1
12/21/05 20:31:57 [Note]: 10002 2
12/21/05 20:32:14 [Info]: Hidden file: C:\WINNT\SYSTEM32\ANTIAK.SYS
12/21/05 20:32:14 [Note]: 10002 2
12/21/05 20:36:17 [Note]: 7007 0

See thise 2 files in WINNT and WINNT\SYSTEM32 ? They don't belong in a legit Windows OS at all - so I renamed them with Blacklight.

Check the link, it just might be worht the effort. Its free.