Full Disclosure mailing list archives
Re: WehnTrust - When you have to trust Wehntrust
From: "Dave Korn" <davek_throwaway () hotmail com>
Date: Tue, 17 Jan 2006 14:29:31 -0000
Thierry Zoller wrote in news:1192877198.20060116214705 () Zoller lu
Dear List, Small blurp I came around; when Wehntrust creates the autostart key it forgets to correctly quote the string in the key and thus may trigger an autostart of c:\program.bat|exe|com up-on reboot... [2]
Heh. I _always_ leave copies of calc.exe lying in my root dir, renamed to "Program.exe" and "Documents.exe". Starting and stopping RealPlayer leaves you with four instances of calc running! Users of Sysinternals' Process Explorer will be amused to see what happens if they enable Options/Replace Task Manager and then try invoking task manager from the SAS menu. cheers, DaveK -- Can't think of a witty .sigline today.... _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- WehnTrust - When you have to trust Wehntrust Thierry Zoller (Jan 16)
- Re: WehnTrust - When you have to trust Wehntrust H D Moore (Jan 16)
- Re[2]: WehnTrust - When you have to trust Wehntrust Thierry Zoller (Jan 16)
- Re: WehnTrust - When you have to trust Wehntrust Dave Korn (Jan 17)
- Re: WehnTrust - When you have to trust Wehntrust Dave Korn (Jan 17)
- Re: WehnTrust - When you have to trust Wehntrust H D Moore (Jan 16)