[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ossec-list] Windows 2003 64-bit false positive note

To: ossec-list <ossec-list@xxxxxxxxxxxxxxxx>
Subject: [ossec-list] Windows 2003 64-bit false positive note
From: "Peter M. Abraham" <peter.m.abraham@xxxxxxxxx>
Date: Tue, 14 Aug 2007 19:44:00 -0000

Greetings:

"Windows Malware: Possible Malware - Svchost running outside
system32."

For a future version, please take into account 64-bit Windows also
uses C:\WINDOWS\SysWOW64 as well as C:\WINDOWS\system32

Thank you.

Follow-Ups:
- [ossec-list] Re: Windows 2003 64-bit false positive note
  - From: Dave Lowe

Prev by Date: [ossec-list] Re: rule chaining
Next by Date: [ossec-list] Re: Windows 2003 64-bit false positive note
Previous by thread: [ossec-list] Re: OSSEC Web Interface--Unable to access ossec directory
Next by thread: [ossec-list] Re: Windows 2003 64-bit false positive note
Index(es):
- Date
- Thread

OSSEC home | Main Index | Thread Index

OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.