Scanning found this

Discussion in 'other security issues & news' started by Rainwalker, Jan 17, 2006.

Thread Status:
Not open for further replies.
  1. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,106
    Location:
    USA
    Is this ok........or not....... HKLM\SOFTWARE\Microsoft\cryptography\rng\seed
    This showed as a data mismatch between Windows API and the Raw Hive Data..........
     
  2. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    In case it helps for discussion what "Scanning found this"....Rootkit revealer [​IMG]

    If so....I reckon we can attempt to determine or focus on the seed
    key that was possibly being altered during the scan :doubt:

    Introduction
    Edit
    additional info if this is indeed Rootkit Revealer related:
    It is mentioned numerous times via a search @ the Sysinternal\Rootkit Revealer Forums that the crypto\rng\seed is a common false positive :doubt:

    One post in particular by namrehto of the Moderator Group:
    http://www.sysinternals.com/Forum/forum_posts.asp?TID=3111
     
    Last edited: Jan 17, 2006
  3. Rainwalker

    Rainwalker Registered Member

    Joined:
    May 18, 2003
    Posts:
    2,106
    Location:
    USA
    Thanks Bubba :)
     
Loading...
Thread Status:
Not open for further replies.