aleph01 Posted June 7, 2011 Posted June 7, 2011 I'm trying to copy a dummy file to thwart Cemgar malware. The dummy file has NTFS Deny permissions and won't copy using FileCopy. Is there a way to do this? Alternately, is there a way to apply NTFS file permissions after the file is copied to destination? Meds. They're not just for breakfast anymore.
Blue_Drache Posted June 7, 2011 Posted June 7, 2011 Oh, are you trying to set the mutex so the virus doesn't ever run? Lofting the cyberwinds on teknoleather wings, I am...The Blue Drache
ripdad Posted June 7, 2011 Posted June 7, 2011 Maybe try this ... Instead of dummy files, just create 2 folders in the Windows\system32 directory and set them read-only. folder 1 = obdwk.sys folder 2 = odbcmr32.dll It won't be able to install those files because of the 2 folders with the same names. This might be a little cheesy - but hey, it works 99% of the time! "The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward
aleph01 Posted June 7, 2011 Author Posted June 7, 2011 Thank you both for your help. I'm not sure what a mutex is, but I'll look it up. I like the idea of creating folders. I didn't think of that. I'll give it a try when I get a chance - I've been pulled assigned a project for now. Thanks again! Meds. They're not just for breakfast anymore.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now