E2G again.

1,095 registered users | 0 active users | 1 LpH | Statistics
Login | Create New User

Welcome to IWETHEY!

Post #254,246 by Andrew Grygus 5/3/06 12:10:06 AM 5/3/06 12:12:23 AM Reply	E2G again. E2G (E2Give - Easy to Give) seems to be the rising star among scumware. It's a bitch to remove since the files can't be removed in Safe Mode, you have to boot on the CD and use Recovery Console. One of the files is c:\\windows\\system32\\iniwin32.dll, but it's further protected and reinstalled by a program called Prutect. That runs two processes that guard each other but the file name may change. On the one I just cleaned up it was c:\\windows\\system32\\piarle.exe. Again, a Recovery Console clean-up. There were also alian modules in the TCP/IP protocol stack but I'm not sure if they were associated with e2G / Prutect or some other scumware. [link\|http://www.aaxnet.com\|AAx] Edited by Andrew Grygus May 3, 2006, 12:12:23 AM EDT Expand All History
Post #254,277 by inthane-chan 5/3/06 12:25:29 PM Reply	Robin Hood and Friar Tuck ride again!
Post #254,346 by broomberg 5/3/06 10:01:44 PM Reply	Yup - made me think of them [link\|http://www.csd.uwo.ca/~magi/personal/humour/Computer_Folklore/Robin%20Hood%20And%20Friar%20Tuck.html\|http://www.csd.uwo.c...Friar%20Tuck.html]
Post #254,356 by Andrew Grygus 5/3/06 11:21:15 PM Reply	This behavior has been standard for . . . . . about 2 years now. What's new is not being able to kill the programs from Safe Mode. I can see the next step coming. Since the Recovery Console is only allowed to work in certain directories, these programs can be put in a directory the Recovery Console is forbidden to enter making clean-up just that much more difficult. [link\|http://www.aaxnet.com\|AAx]
Post #254,358 by folkert 5/3/06 11:28:44 PM Reply	Requireing a LiveCD of something that can read/write/remove Files on NTFS. blech. -- [link\|mailto:greg@gregfolkert.net\|greg], [link\|http://www.iwethey.org/ed_curry\|REMEMBER ED CURRY!] @ *i_wethey* Freedom is not FREE. Yeah, but 10s of Trillions of US Dollars? SELECT * FROM scog WHERE ethics > 0; 0 rows returned.
Post #254,369 by pwhysall 5/4/06 3:04:45 AM Reply	Isn't there a Knoppix variant that has Captive? That'd do the job. Peter [link\|http://www.no2id.net/\|Don't Let The Terrorists Win] [link\|http://www.kuro5hin.org\|There is no K5 Cabal] [link\|http://guildenstern.dyndns.org\|Home] Use P2P for legitimate purposes!

E2G again. - (Andrew Grygus) - (5) - May 3, 2006, 12:12:23 AM EDT

Robin Hood and Friar Tuck ride again! -NT - (inthane-chan) - (4) - May 3, 2006, 12:25:29 PM EDT

Yup - made me think of them - (broomberg) - (3) - May 3, 2006, 10:01:44 PM EDT

This behavior has been standard for . . . - (Andrew Grygus) - (2) - May 3, 2006, 11:21:15 PM EDT

Requireing a LiveCD of something that can read/write/remove - (folkert) - (1) - May 3, 2006, 11:28:44 PM EDT

Isn't there a Knoppix variant that has Captive? - (pwhysall) - May 4, 2006, 03:04:45 AM EDT

iwethey.org

This buffer is for notes you don't want to save, and for Lisp evaluation.
40 ms