Re: Cool Web Search

["JacK" <jack () websecurite org>]

On Friday, July 30, 2004 1:03 AM [GMT+1=CET],
full-disclosure-request () lists netsys com 
<full-disclosure-request () lists netsys com> écrivait:


> So, for those of you who don't think Nanog is full of "Gods of 
> Correctness",
> if you are having probs with removal of CWS, get HiJackThis, let it scan 
> and
> then you will see, sticking out like a wart on your......nose :)........ 
> the
> entries you need to delete in order to properly rid that machine of CWS. 
> It
> wasn't hard using that prog.

HijackThis has its limits : it cannot get rid of some variants, for instance 
which one with a hidden value regenereting the entry

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\Windows\AppInit_DLLs

using  Backdoor.Agent.ba to install itself and laucnchin a random name exe.

Regards,
--
JacK

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html