Jump to content
Posted 12 February 2009 - 02:05 PM
Posted 12 February 2009 - 02:13 PM
Posted 12 February 2009 - 02:36 PM
Edited by Katrex, 12 February 2009 - 02:37 PM.
Posted 12 February 2009 - 10:18 PM
Posted 12 February 2009 - 11:30 PM
C:\Windows\System32\regedit.exe (Trojan.Agent) -> No action taken.
Posted 13 February 2009 - 09:24 AM
Making the Move to x64: File System Redirection
Any time a 32-bit process attempts to access c:\windows\system32 the WoW64 layer redirects it into c:\windows\syswow64 which contains all of the 32-bit Windows binaries. This prevents a 32-bit process from trying to load a 64-bit binary. Any scripts or tools running in a 32-bit process that is referencing this directory will be automatically redirected to the syswow64 directory.
0 members, 0 guests, 0 anonymous users