Full Disclosure mailing list archives

Re: tvm.exe / poll each.exe / blehdefyreal toolbar


From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Thu, 10 Jun 2004 00:38:05 +1200

petard <petard () freeshell org> wrote:

It sounds like CWS.
http://www.wired.com/news/infostructure/0,1377,63391,00.html

Because, as we all know, CWS is the _only_ adware (virus, or other 
malware) that installs "guardians" and uses multiple tricks in its 
attempts to baffle far from intelligent removal efforts, right?

After about 4 hours of trying on a client's PC, I was unable to 
remove it and resorted to a reformat/reinstall.  ...

That is purely a sign of your inadequacy to the job at hand -- curely 
not a qualification for you to provide "advice" to others (well, other 
than of that ofrm "get someone more competent than 'petard' to help").

...  It's incredibly 
persistent and probably not worth your time to remove it.

hth,

Unlikely.

Suggesting that the likely best approach to "fixing" a system of which 
you have _no freaking idea whatsoever_ is ailing it is to reformat and 
reinstall (_or_ anything lelse) is clearly a sign of incompetence, and 
little else.

Presenting such inadequate "advice" with little suggestion of the 
possibility of doubt makes it even less helpful.

Next time you want to help, try S'ing TFU and letting folk who know 
what they are doing have a go, eh?


-- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: