Question

  • Creator
    Topic
  • #2150637

    Write restricted system32

    Locked

    by Anonymous ·

    Over the weekend, while I was visiting some dark places on my XP box, someone kept attacking me with something. What ever it was, it kept writing files to system32 and tripping my antivi. The file names kept changing, one of which was smsdyooo.dll. I could not delete the files from Windows in either normal or safe mode. I had to resort to booting from a slackware USB stick to delete the various files.

    Finally after the ? deletion of files, I came up in safe mode as the administrator and removed the write privilege from system32. My firewall logs still show attacks, but my antivi is not triggered and no files are written in that directory.

    What are the longterm ramifications of not being able to write to system32 in normal mode?

All Answers

  • Author
    Replies
    • #2914204

      Clarifications

      by Anonymous ·

      In reply to Write restricted system32

      Clarifications

    • #2914191

      Good question

      by rob miners ·

      In reply to Write restricted system32

      my only concern would be locking out the system. You will probably find out soon enough. 😉

      Keep an eye on the Event Logs. 😉

Viewing 1 reply thread