[<prev] [next>] [day] [month] [year] [list]
Message-ID: <C5A2E1DE24DB9B46AF3BE1530D5F960993DD@webserver.iridium-satellitephones.com>
From: nick at ethicsdesign.com (Nick Jacobsen)
Subject: Re: http://federalpolice.com:article872@...5686747
one major issue left out by that link is the fact that it is not just a
keylogger, it also rapes the Protected Storage Subsystem, as is obvious
by the fact that it imports pstorec.dll, and calls PStoreCreateInstance.
Another interesting thing to note is that it can be uninstalled by
finding the EXE and running it with the "Uninstall" flag...
-----Original Message-----
From: n.teusink@...net.nl
Sent: Mon 2/16/2004 1:48 AM
To: full-disclosure@...ts.netsys.com
Cc:
Subject: [Full-Disclosure] Re:
http://federalpolice.com:article872@...5686747
More info on this here:
http://spamwatch.codefish.net.au/modules.php?op=modload&name=News&file=a
rticle&sid=55
<http://spamwatch.codefish.net.au/modules.php?op=modload&name=News&file=
article&sid=55>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 4578 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040216/9cbc4840/attachment.bin
Powered by blists - more mailing lists