OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: DNS/Hosts file issues - Update #5 - final

From: Jens Evers (jens.eversXS4ALL.NL)
Date: Thu Oct 02 2003 - 18:28:18 CDT

Hi,

FYI

I've checked the URL
"http://www.sarc.com/avcenter/venc/data/trojan.qhosts.html"
and discovered a small typing error (i presume) in the part which
describes "undoing registry changes"

I refer to point 4 section m.
it states:
"Navigate to the keys:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Tcpip\Parameters\interfaces\windows
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Tcpip\Parameters\interfaces\windows
"

On my w2k running systems however is the Tcpip hive under the Services
hive and not directly
under HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001 or
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002.

To me it should be:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\interfaces\windows
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\interfaces\windows

regards

J. Evers

-----
Wondering as to whether the list is running? The NTBugtraq archives are
updated first before messages are emailed to subscribers. Check the
archives first to see if you have missed any messages;

http://www.ntbugtraq.com/archives

-----