Don't the anti-spyware programs chech and amend the permissions on these
keys?

Regards,

Jason Tozer
Database Analyst
London
Ext 1131 - 3SC.5


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Thane
Sherrington (S)
Sent: 21 October 2005 15:53
To: [email protected]
Subject: [H] Fighting spyware


I've noticed that a lot of spyware renders itself untouchable by 
anti-spyware software by using permissions to protect it's registry 
entries.  I was thinking of running something like this:

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=everyone=f

To allow easier removal.  I know that MS recommends that "everyone" not be 
given full rights, but I can't really take the time to reset each locked 
key, so I figure this would be faster.

What does the collective think?

I also found a program called Danger Tools
http://peter.verhas.com/progs/c/nt/pvt/
that allows me to run a command prompt with System priviledges.  Would 
running the anti-spyware software from that prompt allow me to bypass the 
permissions in the registry?

T


*******

This message and any attachment are confidential and may be privileged or 
otherwise protected from disclosure.  If you are not the intended recipient, 
please telephone or email the sender and delete this message and any attachment 
from your system.  If you are not the intended recipient you must not copy this 
message or attachment or disclose the contents to any other person.

For further information about Clifford Chance please see our website at 
http://www.cliffordchance.com or refer to any Clifford Chance office.

Reply via email to