[cvsnt] Re: Latest Updates

Tony Hoyle tmh at nodomain.org
Mon Oct 25 17:40:51 BST 2004


Peter Crowther wrote:
>>From: rrankin1424-cvsnt at yahoo.com 
>>Well, I guess one can never be 100% certain. However, other 
>>than A/V software,
>>I can't imagine what could be holding any of the files open. 
>>I'll run some
>>tests again with the A/V software disabled, but I'm not hopeful.
> 
> 
> Open question to the floor - would Filemon
> (http://www.sysinternals.com/) spot this, or are the scanners and the
> like at a lower level than Filemon hooks?
> 
I've seen filemon traces and they didn't reveal much..  The AV operates
at quite a low level so you'd have to hook below it to see its access 
(probably varies with different AV though).


Tony



More information about the cvsnt mailing list