full-disclosure - FullDisclosure: CWS removal tools

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <000001c47719$6b3a3100$fc11010a@msad.brookshires.net>
From: toddtowles at brookshires.com (Todd Towles)
Subject: FullDisclosure: CWS removal tools

Randall, we have discussed CWShredder. The author stopped supporting his
program and did have a list of ever variant on this website and the methods
it used. Very tricky.

He also points out it will not stop the newest version because of the
advanced survival techniques being employed. They are starting to use
roolkit like methods to hide and rebuild if damaged. CWShredder won't get
the new version and neither will any new program.

As far as malware goes, it is a lot of malware around that is never detected
by AV or Anti-spyware software or anything else for that matter. 

Sometimes humans are the best countermeasure.

Todd

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of RandallM
Sent: Saturday, July 31, 2004 9:30 AM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] FullDisclosure: CWS removal tools

I haven't seen all the threads on this but there is a tool called
CWShredder. It was created to combat CWS. Unfortunetly,
the author was a student and it seems no longer can support it. I just
attempted to find it somewhere else because his links seem down.
At work I use it all the time to clean the computers. Worked wonders. Guess
I'll cherish my tool until it becomes absolete.
I found one link that still works but not sure if it updates anymore.
http://www.aluriasoftware.com/tools/cwshredder.zip . Here
is some other useful links http://www.safer-networking.org/minifiles.html

thank you
Randall M

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html