Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: WehnTrust - When you have to trust Wehntrust
From: "Dave Korn" <davek_throwaway () hotmail com>
Date: Tue, 17 Jan 2006 19:19:55 -0000

Dave Korn wrote in news:dqiv0c$2rt$1 () sea gmane org
Thierry Zoller wrote in news:1192877198.20060116214705 () Zoller lu
Dear  List,

Small blurp I came around; when Wehntrust creates the autostart key
it forgets to correctly quote the string in the key and thus may
trigger an autostart of c:\program.bat|exe|com up-on reboot... [2]

 Heh.  I _always_ leave copies of calc.exe lying in my root dir, renamed
to "Program.exe" and "Documents.exe".

 Starting and stopping RealPlayer leaves you with four instances of calc

 Users of Sysinternals' Process Explorer will be amused to see what
happens if they enable Options/Replace Task Manager and then try invoking
task manager from the SAS menu.

  Oh, and OE6 launches it by mistake when it's trying to start up messenger!

Can't think of a witty .sigline today.... 

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]