em Posted October 29, 2013 Report Share Posted October 29, 2013 Caz real,Din cand in cand iti dispar niste fisiere destul de importante.Cum ati face sa aflati ce proces va sterge lucrurile?Se accepta si raspunsuri teoretice. La raspunsurile mai practice vreau si sistemul de operare la care va referiti (windows, linux, mac).Premiu: Domeniu Quote Link to comment Share on other sites More sharing options...
EvilPr0xy Posted October 29, 2013 Report Share Posted October 29, 2013 Daca ai un server apache pe PC/Linux/Mac etc... este posibil sa ai un shell.Daca nu ai antivirus, e posibil sa ai un RAT. Daca ai antivirus, iar este posibil sai ai un RAT . Da, poate sa fie FUD Quote Link to comment Share on other sites More sharing options...
em Posted October 29, 2013 Author Report Share Posted October 29, 2013 OK. Dar cum aflu eu care e procesul (care e numele lui). Daca as sti ca cineva imi fura rosiile din curte as pune un paznic sa se uite pe camp noaptea. Pe PC cum fac? Quote Link to comment Share on other sites More sharing options...
EvilPr0xy Posted October 29, 2013 Report Share Posted October 29, 2013 Pai iti iei un firewall si stai sa vezi cum creste iarba (Adica te uiti ce porturi se deschid si daca ai vazut ceva suspect- in afara de programele pe care le rulezi tu- pe IP ala ruleaza virusul Quote Link to comment Share on other sites More sharing options...
Bolovanus Posted October 29, 2013 Report Share Posted October 29, 2013 (edited) // Edited October 29, 2013 by Bolovanus Quote Link to comment Share on other sites More sharing options...
EvilPr0xy Posted October 29, 2013 Report Share Posted October 29, 2013 (edited) // Edited October 29, 2013 by EvilPr0xy Quote Link to comment Share on other sites More sharing options...
Tumbler Posted October 29, 2013 Report Share Posted October 29, 2013 Ai un frate mai mic disperat de jocuri video. Cand vrea sa instaleze un joc ii da o eraore de genul (Nu mai ai memorie arunca pc-ul pe geam) cand vede ca nu mai are memorie se apuca sa stearga fisiere ce nu ii apartin fara sa stie ce sunt acele fisiere si cat de importante sunt. (Windows) Procesul fiind fratele tau mai mic. Quote Link to comment Share on other sites More sharing options...
Silviu Posted October 29, 2013 Report Share Posted October 29, 2013 Ne uitam dupa flag-uri? Process Creation Flags (Windows) Quote Link to comment Share on other sites More sharing options...
black_death_c4t Posted October 29, 2013 Report Share Posted October 29, 2013 strace ori systemtap? Quote Link to comment Share on other sites More sharing options...
APIx00E00 Posted October 29, 2013 Report Share Posted October 29, 2013 Daca ai serviciul secpol.msc activat? Mai exact facem auditing,bifam casuta la delete files si salvam frumos un log. Apoi vedem ce pid, la ce ora etc a fost sters fisierul X. Asta pe windows server 2003,2008 Quote Link to comment Share on other sites More sharing options...
skull Posted October 29, 2013 Report Share Posted October 29, 2013 Sub linux ai putea folosi un audit: Linux Audit Quick Start Quote Link to comment Share on other sites More sharing options...
Renegade Posted October 29, 2013 Report Share Posted October 29, 2013 OK. Dar cum aflu eu care e procesul (care e numele lui). Daca as sti ca cineva imi fura rosiile din curte as pune un paznic sa se uite pe camp noaptea. Pe PC cum fac?programe de monitorizare pentru Windows:Process MonitorProcess Explorer Quote Link to comment Share on other sites More sharing options...
TheOne Posted October 29, 2013 Report Share Posted October 29, 2013 Posibil de la un ativirus, chiar fiind si notepad, il sterge oricum.OFF: rup astia google doar sa le dai domeniul ) Quote Link to comment Share on other sites More sharing options...
Maximus Posted October 29, 2013 Report Share Posted October 29, 2013 (edited) se poate folosi Process Monitor pentru a vedea cine iti sterge, iti reda cam tot ce acceseaza fiecare executabil in parte, dar necesita rabdare si atentie.Sau asa : https://www.google.co.uk/#q=monitor+file+accessInteresant : http://www.visualclick.com/content/cptrax-for-windows-active-directory.htm Edited October 29, 2013 by Maximus Quote Link to comment Share on other sites More sharing options...
nedo Posted October 30, 2013 Report Share Posted October 30, 2013 (edited) in cazul in care stii despre ce fisiere este vorba, creezi un mic app care sa tina sub observatie fisierele respective si sa inregistreze cine le acceseaza si ce face cu ele.Pentru linux se poate folosi inotify ce este o functie a kernelului, din ce citesc eu. exemplu Edited October 30, 2013 by nedo Quote Link to comment Share on other sites More sharing options...
cosmin91ro Posted October 30, 2013 Report Share Posted October 30, 2013 Pai iti iei un firewall si stai sa vezi cum creste iarba (Adica te uiti ce porturi se deschid si daca ai vazut ceva suspect- in afara de programele pe care le rulezi tu- pe IP ala ruleaza virusuldaca e local, fara server de comanda/controll,iti mai deschide vreun port? Quote Link to comment Share on other sites More sharing options...
em Posted November 4, 2013 Author Report Share Posted November 4, 2013 Winner. APIx00E00. Congratz. (mai multe raspunsuri corecte, random.org). Quote Link to comment Share on other sites More sharing options...
