Bugtraq mailing list archives

Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup


From: "Thor (Hammer of God)" <thor () hammerofgod com>
Date: Wed, 19 Apr 2006 15:00:23 -0700

Nope.  It's a protected file.  Change it, or delete it, and it will come
right back. Windows automatically restores protected system files to prevent
corruption or alteration by malware.

t


On 4/16/06 11:54 AM, "somebody () rtr ca" <somebody () rtr ca> spoketh to all:

Just take a binary editor to dnsapi.dll and change the strings to .ccc instead
of .com

That should fix it, until the next update cycle.





Current thread: