[cvsnt] Re: Latest Updates
Tony Hoyle
tmh at nodomain.org
Mon Oct 25 17:40:51 BST 2004
Peter Crowther wrote:
>>From: rrankin1424-cvsnt at yahoo.com
>>Well, I guess one can never be 100% certain. However, other
>>than A/V software,
>>I can't imagine what could be holding any of the files open.
>>I'll run some
>>tests again with the A/V software disabled, but I'm not hopeful.
>
>
> Open question to the floor - would Filemon
> (http://www.sysinternals.com/) spot this, or are the scanners and the
> like at a lower level than Filemon hooks?
>
I've seen filemon traces and they didn't reveal much.. The AV operates
at quite a low level so you'd have to hook below it to see its access
(probably varies with different AV though).
Tony
More information about the cvsnt
mailing list