RE: FullDisclosure: CWS removal tools

["Todd Towles" <toddtowles () brookshires com>]

Randall, we have discussed CWShredder. The author stopped supporting his
program and did have a list of ever variant on this website and the methods
it used. Very tricky.

He also points out it will not stop the newest version because of the
advanced survival techniques being employed. They are starting to use
roolkit like methods to hide and rebuild if damaged. CWShredder won't get
the new version and neither will any new program.

As far as malware goes, it is a lot of malware around that is never detected
by AV or Anti-spyware software or anything else for that matter. 

Sometimes humans are the best countermeasure.

Todd

-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of RandallM
Sent: Saturday, July 31, 2004 9:30 AM
To: full-disclosure () lists netsys com
Subject: [Full-disclosure] FullDisclosure: CWS removal tools

I haven't seen all the threads on this but there is a tool called
CWShredder. It was created to combat CWS. Unfortunetly,
the author was a student and it seems no longer can support it. I just
attempted to find it somewhere else because his links seem down.
At work I use it all the time to clean the computers. Worked wonders. Guess
I'll cherish my tool until it becomes absolete.
I found one link that still works but not sure if it updates anymore.
http://www.aluriasoftware.com/tools/cwshredder.zip . Here
is some other useful links http://www.safer-networking.org/minifiles.html
 
thank you
Randall M
 
 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html