Windows Explorer Redirection DLLS is a new dangerous Windows startup hole

Discussion in 'other anti-malware software' started by aigle, Jan 11, 2009.

Thread Status:
Not open for further replies.
  1. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,089
    Location:
    Saudi Arabia/ Pakistan
    aigle, Jan 11, 2009
    #1
  2. alex_s

    alex_s Registered Member

    Joined:
    Aug 13, 2007
    Posts:
    1,251
    Coming from description any HIPS that intercepts dll creation should stop this nasty. I'm not sure about Sandbox, but OA alerts on dll creation for unknown programs not only in a system directory, but systemwide.
     
    alex_s, Jan 11, 2009
    #2
  3. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,089
    Location:
    Saudi Arabia/ Pakistan
    Yes, but I was thinking if dll creation is allowed will its loading be detected on restart.
     
    aigle, Jan 11, 2009
    #3
Loading...
Similar Threads
  1. ronjor

    What’s new in Windows Defender ATP Fall Creators Update

    ronjor, Jun 27, 2017
    Replies:
    105
    Views:
    4,210
    itman
    Jul 25, 2017 at 6:28 PM
  2. NormanF

    Windows 10 Security Plus

    NormanF, Jun 3, 2017
    Replies:
    2
    Views:
    401
    NormanF
    Jun 3, 2017
  3. ronjor

    Microsoft asks Windows 10 Enterprise customers to test new anti-exploit tech

    ronjor, May 5, 2017
    Replies:
    5
    Views:
    586
    Rasheed187
    May 6, 2017
  4. ParaXY

    Windows 10 AppLocker Rules

    ParaXY, Mar 12, 2017
    Replies:
    23
    Views:
    1,615
    Umbra
    Mar 16, 2017
  5. ronjor

    Uncovering cross-process injection with Windows Defender ATP

    ronjor, Mar 10, 2017
    Replies:
    16
    Views:
    693
    Umbra
    May 10, 2017
Thread Status:
Not open for further replies.