one major issue left out by that link is the fact that it is not just a
keylogger, it also rapes the Protected Storage Subsystem, as is obvious
by the fact that it imports pstorec.dll, and calls PStoreCreateInstance.
Another interesting thing to note is that it can be uninstalled by
finding the EXE and running it with the "Uninstall" flag...
-----Original Message-----
From: n.teusink@planet.nl
Sent: Mon 2/16/2004 1:48 AM
To: full-disclosure@lists.netsys.com
Cc:
Subject: [Full-Disclosure] Re:
http://federalpolice.com:article872@1075686747
More info on this here:
http://spamwatch.codefish.net.au/modules.php?op=modload&name=News&file=a
rticle&sid=55
<http://spamwatch.codefish.net.au/modules.php?op=modload&name=News&file=
article&sid=55>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
<<winmail.dat>>