Re: [Full-Disclosure] Tools for checking for presence of adware remotely

From: Aditya, ALD [ Aditya Lalit Deshmukh ] (aditya.deshmukh_at_online.gateway.technolabs.net)
Date: 07/01/04

  • Next message: Aditya, ALD [ Aditya Lalit Deshmukh ]: "Re: [Full-Disclosure] Tools for checking for presence of adware remotely" 
    To: "Harlan Carvey" <keydet89@yahoo.com>, <full-disclosure@lists.netsys.com>
Date: Thu, 1 Jul 2004 06:54:58 +0530

    > Sure...Perl scripts. As a security admin in an FTE
    > position, I had scripts that checked all systems
    > within the domain for entries in the ubiquitous 'Run'
    > key, as well as for BHOs. Easy stuff, pretty trivial, actually.

    but then you would have to keep on updating your bhos and other sigs, and what about the spyware that when removed from the run key refuse to let the network connections operate? how do u take care of them ?

    -aditya

                                                          
    щb╜ъ▐vы"Ю axZ▐xўл▓Й┌ФGb╢*'бєК[kjпЁ├цj)mнк rЙ 

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Aditya, ALD [ Aditya Lalit Deshmukh ]: "Re: [Full-Disclosure] Tools for checking for presence of adware remotely"

    Relevant Pages

    • Re: [Full-Disclosure] Tools for checking for presence of adware remotely
      ... > FTE ... I had scripts that checked all systems ... >> within the domain for entries in the ubiquitous ... as well as for BHOs. ...
      (Full-Disclosure)
    • Re: [Full-Disclosure] Tools for checking for presence of adware remotely
      ... > Sure...Perl scripts. ... > within the domain for entries in the ubiquitous 'Run' ... as well as for BHOs. ... but then you would have to keep on updating your bhos and other sigs, and what about the spyware that when removed from the run key refuse to let the network connections operate? ...
      (Full-Disclosure)
    • Re: [Full-Disclosure] Tools for checking for presence of adware remotely
      ... > Sure...Perl scripts. ... > within the domain for entries in the ubiquitous 'Run' ... as well as for BHOs. ... but then you would have to keep on updating your bhos and other sigs, and what about the spyware that when removed from the run key refuse to let the network connections operate? ...
      (Full-Disclosure)
    • Re: Can one awk script call another?
      ... The scripts work on gettext .po files, which contain entries formatted like this: ... And what I want to do is to automatically take that translation from the bottom of the file, and put it back into each of the corresponding entries higher up. ...
      (comp.lang.awk)
    • Re: Desired behaviour of "ifconfig -alias"
      ... are running in automated scripts, ... If anyone depends on "ifconfig iface -alias" I'll be surprised. ... reference to rc.conf ifconfig_iface_aliasX entries. ...
      (freebsd-stable)