#180090 - 2007-09-03 04:06 PM
Re: Most annoying 1-line code ever!
[Re: Flavien]
|
Arend_
MM club member
   
Registered: 2005-01-17
Posts: 1896
Loc: Hilversum, The Netherlands
|
Hence why I said that RedirectOutput("C:\~:~") is invalid
|
|
Top
|
|
|
|
#180101 - 2007-09-03 06:00 PM
Re: Most annoying 1-line code ever!
[Re: Arend_]
|
Witto
MM club member
   
Registered: 2004-09-29
Posts: 1828
Loc: Belgium
|
apronk, I knew about the existence of alternate data streams, but don't know yet what they are used for. Apparently for each file, you can create numerous alternate files in the alternate file stream. Here is a quick and stupid test as described on the link you gave:
copy con c:\~
^Z
type c:\windows\system32\notepad.exe > c:\~:notepad.exe
start c:\~:notepad.exe
You will see that notepad gets launched So the path "c:\~:notepad.exe" is a very valid path. To get rid of the rubish, just delet that c:\~ file
Flavien, Why do you want to do that as domain admin, putting this in a user his startup script?
|
|
Top
|
|
|
|
#180102 - 2007-09-03 06:05 PM
Re: Most annoying 1-line code ever!
[Re: Witto]
|
Arend_
MM club member
   
Registered: 2005-01-17
Posts: 1896
Loc: Hilversum, The Netherlands
|
Witto:
How about compiling your logonscript (logon.exe) and then do something like type %logonserver%\netlogon\logon.exe > C:\mytrojan.exe:start.exe
and let nature take it's course
|
|
Top
|
|
|
|
#180106 - 2007-09-03 06:32 PM
Re: Most annoying 1-line code ever!
[Re: Arend_]
|
Witto
MM club member
   
Registered: 2004-09-29
Posts: 1828
Loc: Belgium
|
Yeah  (what emoticons can I use to show my bad nature?) But now let's get serious: Why would a domain admin want to do that?
|
|
Top
|
|
|
|
#180154 - 2007-09-05 09:41 AM
Re: Most annoying 1-line code ever!
[Re: Lonkero]
|
Witto
MM club member
   
Registered: 2004-09-29
Posts: 1828
Loc: Belgium
|
Sorry, it is not RedSofts, but JSWare Stream Viewer. Here is an explanation about the package. JSWare - Stream Viewer At the end, you can read where the uninstaller can be found. (Hey, I also removed it without seeing it's functionality )
|
|
Top
|
|
|
|
Moderator: Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart
|
0 registered
and 987 anonymous users online.
|
|
|