[no subject]

> I'm curious...what tools do you use to accomplish the above?

	I have access to a wide spectrum of AV products plus I would try
running it and monitoring it in a VMware sandbox and check for unusual
activity.  If I were really suspicious (since it's a .exe) I would
probably run the "WOLF" (Windows On-Line Forensics) tool-kit after
running it.  I may yet run it through the gauntlet, I just don't have an
immediate need for it.

> Thanks,
> John

	Mike
-- 
 Michael H. Warfield    |  (770) 985-6132   |  mhw at WittsEnd.com  
  /\/\|=mhw=|\/\/       |  (678) 463-0932   |  <a  rel="nofollow" href="http://www.wittsend.com/mhw/";>http://www.wittsend.com/mhw/</a>
  NIC whois:  MHW9      |  An optimist believes we live in the best of all
 PGP Key: 0xDF1DD471    |  possible worlds.  A pessimist is sure of it!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 307 bytes
Desc: This is a digitally signed message part



</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00235" href="msg00235.html">[ale] OT: Looking for some help with &quot;locked&quot; IBM Travelstar 30 Gig Laptop Hard Drive</a></strong>
<ul><li><em>From:</em> vanloggins at gmail.com (Van Loggins)</li></ul></li>
<li><strong><a name="00236" href="msg00236.html">[ale] OT: Looking for some help with &quot;locked&quot; IBM Travelstar 30	Gig Laptop Hard Drive</a></strong>
<ul><li><em>From:</em> greg.freemyer at gmail.com (Greg Freemyer)</li></ul></li>
<li><strong><a name="00237" href="msg00237.html">[ale] OT: Looking for some help with &quot;locked&quot; IBM Travelstar	30	Gig Laptop Hard Drive</a></strong>
<ul><li><em>From:</em> mhw at wittsend.com (Michael H. Warfield)</li></ul></li>
<li><strong><a name="00238" href="msg00238.html">[ale] OT: Looking for some help with &quot;locked&quot; IBM	Travelstar	30	Gig Laptop Hard Drive</a></strong>
<ul><li><em>From:</em> jb at sourceillustrated.com (John Wells)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00238.html">[ale] OT: Looking for some help with &quot;locked&quot; IBM	Travelstar	30	Gig Laptop Hard Drive</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00240.html">[ale] Fedora scsi module</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00238.html">[ale] OT: Looking for some help with &quot;locked&quot; IBM	Travelstar	30	Gig Laptop Hard Drive</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00240.html">[ale] Fedora scsi module</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00239"><strong>Date</strong></a></li>
<li><a href="threads.html#00239"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>