Scanning found this

Discussion in 'other security issues & news' started by Rainwalker, Jan 17, 2006.

Thread Status:
Not open for further replies.
  1. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,719
    Location:
    USA
    Is this ok........or not....... HKLM\SOFTWARE\Microsoft\cryptography\rng\seed
    This showed as a data mismatch between Windows API and the Raw Hive Data..........
     
  2. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    In case it helps for discussion what "Scanning found this"....Rootkit revealer [​IMG]

    If so....I reckon we can attempt to determine or focus on the seed
    key that was possibly being altered during the scan :doubt:

    Introduction
    Edit
    additional info if this is indeed Rootkit Revealer related:
    It is mentioned numerous times via a search @ the Sysinternal\Rootkit Revealer Forums that the crypto\rng\seed is a common false positive :doubt:

    One post in particular by namrehto of the Moderator Group:
    http://www.sysinternals.com/Forum/forum_posts.asp?TID=3111
     
    Last edited: Jan 17, 2006
  3. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,719
    Location:
    USA
    Thanks Bubba :)
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.