Security Basics mailing list archives

Re: Xupiter


From: "Remington Winters" <fyreguy () rivetgeek com>
Date: Thu, 1 May 2003 10:50:35 -0700

No, it doesnt store itself in memory.  It stores a copy of the installer on
the c drive and creates a registry entry to launch the installer on boot.
Check the run key, as I recall it's named something innocuous.

----- Original Message -----
From: "Stephen Wilcox" <Stephenwilcox () universalcomputersys com>
To: <security-basics () securityfocus com>
Sent: Thursday, May 01, 2003 7:20 AM
Subject: Xupiter




Has anyone heard for Xupiter storing itself in the memory section of the
pc, so when it's uninstalled and the computer is rebooted it can reinstall
itself?

--------------------------------------------------------------------------
-
FastTrain has your solution for a great CISSP Boot Camp. The industry's
most
recognized corporate security certification track, provides a
comprehensive
prospectus based upon the core principle concepts of security. This ALL
INCLUSIVE curriculum utilizes lectures, case studies and true hands-on
utilization
of pertinent security tools. For a limited time you can enter for a chance
to win one of the latest technological innovations, the SEGWAY HT.
Log onto http://www.securityfocus.com/FastTrain-security-basics
--------------------------------------------------------------------------
--



---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most 
recognized corporate security certification track, provides a comprehensive 
prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case 
studies and true hands-on utilization 
of pertinent security tools. For a limited time you can enter for a chance 
to win one of the latest technological innovations, the SEGWAY HT. 
Log onto http://www.securityfocus.com/FastTrain-security-basics 
----------------------------------------------------------------------------


Current thread: