RE: Blocking Instant Messaging Applications

["Aditya Deshmukh" <aditya.deshmukh () online gateway strangled net>]

> Hi Nick--do you use the hash of the binary because there's a 
> way round it if you just used the .exe name? 
> So clever users can rename the file and be back
> online?

Also the hash mechanism would also be very easily defeated with 
Reshacker or even with echo. >> exefilename.exe 

This would keep the file working and alter the hash of the file



________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)