From: James.Cupps at sappi.com (James.Cupps@...pi.com)
Subject: Rootkit For Spyware? Hide your adware from 
	all Adware removers and Anti-viruses

Nothing new about rootkits. They aren't big news because they are old news.
Although depressing this is defiantly possible.

 

James Cupps
Information Security Officer



-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of GuidoZ
Sent: Wednesday, September 22, 2004 11:57 PM
To: Will Image
Cc: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Rootkit For Spyware? Hide your adware from
all Adware removers and Anti-viruses

 

Interesting indeed. Although, I imagine this was a spam email, and I
never believe (nor buy) anything from spam. I wondr how credible this
really is. If there was such a way to do what they claim, don't you
think it would have been big news? One would think you wouldn't first
hear about it through spam.

Also - nice website they have. http://www.randexsoft.com
<http://www.randexsoft.com>  Simply says:

Access Forbidden -- Go away.

I love a company who is customer friendly.

--
Peace. ~G


On Wed, 22 Sep 2004 20:10:28 -0700 (PDT), Will Image
<xillwillx@...oo.com> wrote:
> I recieved this in my inbox today:
> how long do you think this company will last?
>
> > Date: Wed, 22 Sep 2004 19:02:44 -0400
> > From: Jacques Tremblay <jacques.tremblay@...il.com>
> > To: xillwillx@...oo.com
> > Subject: Hide your adware from all Adware removers
> > and Anti-viruses
> >
> > To: Business development manager
> >
> > Subject: Hide your adware from all Adware removers
> > and  Anti-viruses
> >
> >
> >
> > Hi,
> >        Adware removers are gaining in popularity and
> > they cause a big
> > revenue threat to adware based businesses, as we see
> > our software
> > installations get desinstalled after a period of
> > time that is shorter
> > and shorter, we see our revenues get smaller and
> > smaller.
> >
> >        Why would an honest adware based business
> > lose revenue just because
> > some adware remover has identifyed it as being
> > something to remove ?
> >
> >        We beleive we have the right to hide from
> > these adware removers as
> > long as we provide a way for the user to uninstall
> > and that he agrees
> > that the software will be uninstalled only with the
> > provided
> > uninstaller.
> >
> >        It is in that spirit that we created the
> > solution to the problem :
> >
> >
> > AdProtector 1.2
> >
> >
> >        We have developed software capable of hiding
> > your software from all
> > adware removers and anti-viruses on a Windows
> > NT/2000/2003/XP machine.
> >
> >        Basically we have filtered the windows kernel
> > so that we could mofify
> > the behavior of the system itself. So now we can
> > hide anything we want
> > from windows.
> >
> >                            It can :   - Hide Registry Keys
> >                                       - Hide Files
> >                                               - Hide Processes
> >
> >        By hiding these 3 key elements from windows,
> > your application won't
> > ever be detected by any adware removers.
> >
> >        Interesting ?
> >
> >        For more information or to resquest a Demo :
> >   email :
> > hexa@...dexsoft.com
> >
> > Business is moving fast, keep ahead of the
> > competition!

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
<http://lists.netsys.com/full-disclosure-charter.html> 

This message may contain information which is private, privileged or
confidential and is intended solely for the use of the individual or entity
named in the message. If you are not the intended recipient of this message,
please notify the sender thereof and destroy / delete the message. Neither
the sender nor Sappi Limited (including its subsidiaries and associated
companies) shall incur any liability resulting directly or indirectly from
accessing any of the attached files which may contain a virus or the like. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040923/b5af4f69/attachment.html

Powered by blists - more mailing lists