The Load Point Diagnostic Utility to identify suspected threats
This tool generates a detailed report and a list of the programs that are loading on your computer.
You can use the report to research for some malicious program that is not being detecting by Symantec AntiVirus or Symantec Endpoint Protection 11.
Download ESUGLPDU_2.0.exe to your desktop.
Run the tool and it will create a directory in C:\ called "C:\Sym_LoadPointDiag"
There will be a black DOS window open while it runs. Some text will be displayed in the window to show the utility's current operation as it runs.
Navigate to the directory "C:\Sym_LoadPointDiag" and open it.
Inside the folder you will find 2 files. One is called "Finish.bat" {This file can be deleted.}
and a zip file with a long name like " LoadPointDiag_L-020407__TIME_6_40_58_96_DATE_Tue_10_07_2008_Data_Files.zip"
This .zip contains diagnostic logs which can help to identify suspect files, but does not contain the suspect files themselves.
Comments
Good one.
This tool will really help finding threat.
Hi vinja
Its not the tool..its you who will have to find the threats in the logs.
This tool is good in finding common loadpoint entries where threats reside..
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
autoruns from sysinternals
I think autoruns from sysinternals is also a really good tool and the best thing about autoruns is, it gives you various tab for different locations...like schedules tasks, services etc.
THE FILE IS CREATED BUT WHEN
THE FILE IS CREATED BUT WHEN I AM GOING TO EXTRACT IT NEED AN ENCRYPTED PASSWORD.WHAT WILL BE THE PASSWORD......
try symantec
try symantec
random .exe's
This program installs a lot of random .exe's in the directory. I prefer to know what exactly is being installed and ran. It looks like a good utility, but I prefer more "trusted" methods.
"Trust, but verify."
Where do I run it?
Do I run it on all the clients that are infected?
Yes
Yes
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
yes it;s good!
yes it;s good!
There is no accident !
Would you like to reply?
Login or Register to post your comment.