Full Disclosure mailing list archives
RE: Re: http://federalpolice.com:article872@1075686747
From: "Nick Jacobsen" <nick () ethicsdesign com>
Date: Mon, 16 Feb 2004 04:54:34 -0800
one major issue left out by that link is the fact that it is not just a
keylogger, it also rapes the Protected Storage Subsystem, as is obvious
by the fact that it imports pstorec.dll, and calls PStoreCreateInstance.
Another interesting thing to note is that it can be uninstalled by
finding the EXE and running it with the "Uninstall" flag...
-----Original Message-----
From: n.teusink () planet nl
Sent: Mon 2/16/2004 1:48 AM
To: full-disclosure () lists netsys com
Cc:
Subject: [Full-Disclosure] Re:
http://federalpolice.com:article872@1075686747
More info on this here:
http://spamwatch.codefish.net.au/modules.php?op=modload&name=News&file=a
rticle&sid=55
<http://spamwatch.codefish.net.au/modules.php?op=modload&name=News&file=
article&sid=55>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
<<winmail.dat>>
Current thread:
- Re: http://federalpolice.com:article872@1075686747 n . teusink (Feb 15)
- RE: Re: http://federalpolice.com:article872@1075686747 Aditya, ALD [Aditya Lalit Deshmukh] (Feb 16)
- <Possible follow-ups>
- RE: http://federalpolice.com:article872@1075686747 Remko Lodder (Feb 15)
- Re: http://federalpolice.com:article872@1075686747 first last (Feb 15)
- RE:http://federalpolice.com:article872@1075686747 Tom Koehler (Feb 16)
- Re: http://federalpolice.com:article872@1075686747 n . teusink (Feb 16)
- Re: http://federalpolice.com:article872@1075686747 madsaxon (Feb 16)
- RE: Re: http://federalpolice.com:article872@1075686747 Nick Jacobsen (Feb 16)
