Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

RE: Null Terminated Strings

Subject: RE: Null Terminated Strings
Date: Mon, 27 Jun 2005 17:01:03 +0100
When it comes to root kits, from what I understand, it would be next to
impossible to remove. The best solution would be to reinstall the OS from
scratch (including formatting the hard drive) as I am led to believe that
this is the only way to get rid of a rootkit.

Regards,

Prashant.

The opinions expressed in this email are those of my own and does not
represent those of any organisation or associations to which I belong to
unless stated otherwise.

-----Original Message-----
From: e_borgard@yahoo.com [mailto:e_borgard@yahoo.com] 
Sent: 26 June 2005 13:44
To: security-basics@securityfocus.com
Subject: Null Terminated Strings

Recently, I downloaded and scanned my PC with Rootkit Reveler from
Sysinternals.  It produced a hidden registy key in:
 HKLM\Software\Microsoft\Windows\CurrentVersion\Reinstall\

Should I be concerned that this is a rootkit?

What can I do to remove this registry entry if it is hidden from regedit?

Any advice would be helpful.

Sincerely,

Erick Borgard A+, CCNA


<Prev in Thread] Current Thread [Next in Thread>