Re: FrSIRT False Alarm

[Thierry Zoller <Thierry () sniff-em com>]

aco> btw illwill made something to block it, havent tested it myself but this
aco> might be useful to post it here:
aco> http://illmob.org/files/0day/msdds.dll_deactivator.rar

It sets the killbit that's all. A .reg file would have been enough but
then of course doing that in asm makes it all l33t and stuff...

-- 
Thierry Zoller
mailto:Thierry () sniff-em com


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/