Hi,
as the blogentry and the tool itself suggests, feel free to ask any question from me by mailing me at toni(_at_)teamfurry.com.
Shortly put:
The tool works a bit similarly to the StormWorm dropper itself. When stormworm is infecting a machine, it checks certain services to see if there is already an earlier variant of itself on the machine. If it detects one, it will remove it. My tool uses the same principle, and effectively removes the infection from the host.
If you have any other questions, don't hesitate to mail.
Regards,
Toni Koivunen
Teamfurry.com
Slashdot Mirror
Haha. No pron or nasty stuff there. Just a blog with a few dozen entries focusing on malware reverse engineering and such.
Hi, as the blogentry and the tool itself suggests, feel free to ask any question from me by mailing me at toni(_at_)teamfurry.com. Shortly put: The tool works a bit similarly to the StormWorm dropper itself. When stormworm is infecting a machine, it checks certain services to see if there is already an earlier variant of itself on the machine. If it detects one, it will remove it. My tool uses the same principle, and effectively removes the infection from the host. If you have any other questions, don't hesitate to mail. Regards, Toni Koivunen Teamfurry.com