Windows Explorer Redirection DLLS is a new dangerous Windows startup hole

http://www.greatis.com/security/explorer_redirection_dll_startup_hole.htm

First time i saw this stuff. I wonder how good/ bad it will stand against HIPS and Sandboxes etc. I am trying to get the sample but not sure if I can test or not.

 

Coming from description any HIPS that intercepts dll creation should stop this nasty. I'm not sure about Sandbox, but OA alerts on dll creation for unknown programs not only in a system directory, but systemwide.

 

Yes, but I was thinking if dll creation is allowed will its loading be detected on restart.