π γγ©γΌ π γγ π
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
@wagon_ @weet
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
Go to the top of the file, click on the first line, and search for Download.
You will see that one of the files downloaded by the user is Eraser 6.2.0.2962.exe. Eraser is a secure data removal tool for Windows! It appears our users was trying to hide his tracks. (Though not well enough to evade our forensics tools.)
Close Notepad
Move the two ntuser_reg_rip.txt files to the Recycle Bin.
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
can you guys help me those files in the recycling bin?
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
@Cyber Forum
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
hello?
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
idk how to do that'
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
yeah
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
this
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
@weet
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
and it never showed with a user who used this
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
with burn
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
i looked for march 25
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
how do i do that
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
i am looking at it
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
You will see RegRipper has not only found the files but also information such as the times when they were written.
Repeat the search, clicking Find Next each time to see the many reports about recent docs. After about ten searches you will find a timeline for when these recent documents were written: all between March 23 and March 25 and many late in the evening of those days.
Scroll back to the top of the file and click on the first line. This time use cntrlf to find the work burn
Can you tell the user used a CD burning program on March 25?
Let's see if we can find some recently downloaded files.
Go to the top of the file, click on the first line, and search for Download.
You will see that one of the files downloaded by the user is Eraser 6.2.0.2962.exe. Eraser is a secure data removal tool for Windows! It appears our users was trying to hide his tracks. (Though not well enough to evade our forensics tools.)
Close Notepad
Move the two ntuser_reg_rip.txt files to the Recycle Bin.
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
65 replies
CICyber Info
β’Created by π γγ©γΌ π γγ π on 10/7/2023 in #βοΈ±support-requests
cyber securty error
i am mising something?
65 replies