Windows Registry - Nasty Games of Hide & Seek

Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

BleepingComputer.com > Security > Breaking Virus & Security News

Windows Registry - Nasty Games of Hide & Seek, We may see this in future viruses?

Options

harrywaldron View Member Profile	Aug 26 2005, 04:06 PM Post #1
Security Reporter Group: Members Posts: 509 Joined: 10-April 04 From: Roanoke, Virginia Member No.: 107	For the past two days, the Internet Storm Center (ISC) has shared a warning on very long registry key values that can be made hidden from REGEDIT by malware making removal more complicated than in the past. This may be in a new trend in virus developments The Internet Storm Center (ISC) is offering a free Registry Search Tool. This neat new tool will locate the registry key values greater than 255 characters in length. Windows Registry - Nasty Games of Hide & Seek http://isc.sans.org/diary.php?date=2005-08-24 http://isc.sans.org/diary.php?date=2005-08-25 ISC Registry Search tool -- locates long key values http://isc.sans.org/LVNSearch.exe QUOTE We have started to see some possible reports of malware which utilizes this concealment technique in the wild. Products that have been reported to be able to query/report/delete/etc these keys: AppSense Environment Manager HiJackThis v1.99.1 (SCAN function) HiJackThis v1.99.2 (in development) Stillsecure SafeAccess Sysinternals Autoruns (mixed reports) Regedt32 (Win2k) -------------------- Microsoft Security Journal

« Next Oldest · Breaking Virus & Security News · Next Newest »

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)

0 Members:

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

Lo-Fi Version

Time is now: 21st November 2009 - 09:17 PM

Advertise \| About Us \| Terms of Use \| Privacy Policy \| Contact Us \| Site Map \| Chat \| Tutorials \| Uninstall List
Discussion Forums \| The Computer Glossary \| Resources \| RSS Feeds \| Startups \| The File Database \| Virus Removal Guides