I just want to say that in the long time I have been a member here, the service has been great, and the members the same, and that CTH has grown into the community that we all know and love - Oracle 
Flaw may hide malicious software
Posted by: Tweaker
Date added: 03:54, 27th August 2005 GMT
Source: ZDNet News
These keys are stored in the Windows Registry, a core part of the operating system that stores PC settings. Some antivirus and anti-spyware products scan the registry for malicious programs, but this new weakness allows hackers to hide the presence of their applications, according to security vendor StillSecure.
"It can be used to hide malicious programs on a system that would go undetected by security software or registry scanning tools," said Mitchell Ashley, chief technology officer at StillSecure, which is based in Louisville, Colo. Detection and cleanup could be difficult to impossible, according to StillSecure.
The SANS Internet Storm Center, which tracks Internet threats, on Thursday listed some applications that, according to reports it received, can be tricked by the longer registry keys. The list includes AdAware, Microsoft's Windows AntiSpyware, HijackThis, Norton SystemWorks 2003 Pro, Microsoft's Windows Registry Editor and WinDoctor.
According to Microsoft, the issue is not a security vulnerability, but a function within the operating system that could be misused. Microsoft said it is not aware of the trick being employed to hide software.
Security monitoring company Secunia rates the Windows Registry issue "not critical."
Tools: Post a comment | Link to this news item | Send to a friend | Submit News
Error: You are not logged in.
In order to leave comments to news articles you must be a Cyber Tech Help Member.
Registration is completely free! 
Register to become a member
Along with access to leave comments to news articles you will be able to ask any computing questions you might have on the Cyber Tech Help Forums.
