|Posted by:||Milos Puchta (mpuchta@.nospam.post.cz)|
|Date:||Fri, 31 Mar 2006|
Hi to All,
in the Active Directory (Windows 2003 /SP1 and Windows XP /SP2)
there is problem with one file in the users's home directory.
I have found by using RootkitRevealer (Sysinternals) one file, the name
of which is similar to the temporary internet file (Capitals+number
zero size, atttributes SHA, that I CAN NOT DELETE.
I tried to do workaround by creating batch file that would change attributes
and running under SYSTEM .... but the server follows what RootkitRevealer
found - file is not visible for Windows APi.
Any help is appreciated.