Apollo11
Posts: 24082
Joined: 6/7/2001 From: Zagreb, Croatia Status: offline
|
Hi all, Found interesting new Virus/Mallware/Spyware on one of the laptops my users have... It creates entires for almost any know usable AntiVirus/AntiMallware/AntiSpyware tool and almost all system EXEs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\EXE_NAME.exe and adds: "Debugger" = "svchost.exe" Thus effectively disabling almost any useful program to clean directly on machine (i.e. the programs is redirected - but no error is given)! Interesting thingie... Leo "Apollo11"
_____________________________
Prior Preparation & Planning Prevents Pathetically Poor Performance! A & B: WitW, WitE, WbtS, GGWaW, GGWaW2-AWD, HttR, CotA, BftB, CF P: UV, WitP, WitP-AE
|