Cyber Info•3y ago•

64 replies

cyber securty error

i need help with this

error_i_am_getting_i_am_trying_to_get_the_out_put_but_it_is_not_coming.PNG

Cyber Forum•10/7/23, 5:54 PM

Post created!

This post has been indexed in our web forum and will be seen by search engines so other users can find it outside Discord

Your user profile is private by default and won't be visible to users outside Discord, if you want to be visible in the web forum you can add the "Public Forum Profile" role in <id:customize>

You can mark a message as the answer for your post with Right click -> Apps -> Mark SolutionRight click -> Apps -> Mark Solution
(if you don't see the option, try refreshing Discord with Ctrl + R)

Collin B.•10/7/23, 5:57 PM

Can you please post screenshots separately both both screens I cannot read the text

w33t•10/7/23, 5:58 PM

And why don't you show a screenshot of where exactly you're having an error, because this is just... not helpful for anyone to help you

awake-maroonOP•10/7/23, 5:59 PM

hold on

w33t•10/7/23, 6:00 PM

Is that where you're having issues? Cause if so, then I suggest you read the text on the right

awake-maroonOP•10/7/23, 6:00 PM

i have a problem

awake-maroonOP•10/7/23, 6:00 PM

doing this

awake-maroonOP•10/7/23, 6:00 PM

i am having trouble with 2 and 3

awake-maroonOP•10/7/23, 6:01 PM

where it i have to put them in the RegRipper

awake-maroonOP•10/7/23, 6:01 PM

and on the hive

awake-maroonOP•10/7/23, 6:01 PM

file

awake-maroonOP•10/7/23, 6:01 PM

i did that

awake-maroonOP•10/7/23, 6:01 PM

and it worked

awake-maroonOP•10/7/23, 6:01 PM

but for the report for the 2nd one

awake-maroonOP•10/7/23, 6:01 PM

it is not workng

w33t•10/7/23, 6:02 PM

You're telling it where to save the report

awake-maroonOP•10/7/23, 6:02 PM

w33t•10/7/23, 6:03 PM

Yes

w33t•10/7/23, 6:03 PM

Correct

Collin B.•10/7/23, 6:03 PM

Now open them

w33t•10/7/23, 6:03 PM

Now open it

w33t•10/7/23, 6:03 PM

Again, you're not reading the instructions on the right

awake-maroonOP•10/7/23, 6:04 PM

w33t•10/7/23, 6:04 PM

Sweet, so it's working as intended

w33t•10/7/23, 6:04 PM

There is no problem here lol

awake-maroonOP•10/7/23, 6:05 PM

but what do i do next tho

w33t•10/7/23, 6:05 PM

my guy

w33t•10/7/23, 6:05 PM

it says

w33t•10/7/23, 6:05 PM

on the right

w33t•10/7/23, 6:05 PM

of your screen

w33t•10/7/23, 6:05 PM

what to do

awake-maroonOP•10/7/23, 6:05 PM

contrl f

awake-maroonOP•10/7/23, 6:05 PM

i did that

w33t•10/7/23, 6:05 PM

w33t•10/7/23, 6:05 PM

So continue to read past that

awake-maroonOP•10/7/23, 6:05 PM

i did

awake-maroonOP•10/7/23, 6:06 PM

and it did not show me a goal ion that i have did this

awake-maroonOP•10/7/23, 6:06 PM

i am mising something?

awake-maroonOP•10/7/23, 6:06 PM

Collin B.•10/7/23, 6:07 PM

Please read the instructions, keep clicking find next until you find the entries described in the instructions

awake-maroonOP•10/7/23, 6:07 PM

You will see RegRipper has not only found the files but also information such as the times when they were written.

Repeat the search, clicking Find Next each time to see the many reports about recent docs. After about ten searches you will find a timeline for when these recent documents were written: all between March 23 and March 25 and many late in the evening of those days.

Scroll back to the top of the file and click on the first line. This time use cntrlf to find the work burn

Can you tell the user used a CD burning program on March 25?
Let's see if we can find some recently downloaded files.

Go to the top of the file, click on the first line, and search for Download.
You will see that one of the files downloaded by the user is Eraser 6.2.0.2962.exe. Eraser is a secure data removal tool for Windows! It appears our users was trying to hide his tracks. (Though not well enough to evade our forensics tools.)

Close Notepad

Move the two ntuser_reg_rip.txt files to the Recycle Bin.

w33t•10/7/23, 6:08 PM

Yes, so if you read that and follow it, you'll have no problems lol

awake-maroonOP•10/7/23, 6:08 PM