[Full-disclosure] Re: WehnTrust - When you have to trust Wehntrust
davek_throwaway at hotmail.com
Tue Jan 17 19:19:55 GMT 2006
Dave Korn wrote in news:dqiv0c$2rt$1 at sea.gmane.org
> Thierry Zoller wrote in news:1192877198.20060116214705 at Zoller.lu
>> Dear List,
>> Small blurp I came around; when Wehntrust creates the autostart key
>> it forgets to correctly quote the string in the key and thus may
>> trigger an autostart of c:\program.bat|exe|com up-on reboot... 
> Heh. I _always_ leave copies of calc.exe lying in my root dir, renamed
> to "Program.exe" and "Documents.exe".
> Starting and stopping RealPlayer leaves you with four instances of calc
> Users of Sysinternals' Process Explorer will be amused to see what
> happens if they enable Options/Replace Task Manager and then try invoking
> task manager from the SAS menu.
Oh, and OE6 launches it by mistake when it's trying to start up messenger!
Can't think of a witty .sigline today....
Full-Disclosure is hosted and sponsored by Secunia.