<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Dear list,<br><br>after weeks of total ignorance by Microsoft I decided to finally release all information<br>related to a bug, that has to do with the Windows XP SP2 Taskmanager. Manipulating<br>a Registry key makes it possible to disable the Taskmgr. On the next startup it will crash with<br>an error message. It is possible to backup the key and repair the Registry doing so, but<br>the attack scenario is clear: A virus uses this code, the user can't open the Taskmgr anymore<br>and your process is somehow "hidden".<br><br>The full information about this bug, can be found here:<br><a href="http://core-security.net/archive/2008/march/index.php#14032008">http://core-security.net/archive/2008/march/index.php#14032008</a><br><br>And the exploit is available here:<br><a href="http://core-security.net/releases/exploits/taskmgr_dos.c.txt">http://core-security.net/releases/exploits/taskmgr_dos.c.txt</a><br><br>Greets,<br>SkyOut<br><br>---<br>core-security.net<br>---</body></html>