[RC5] Hiding the NT service client

Paul "Froggy" Schneider pxs3 at po.cwru.edu
Tue May 5 21:34:47 EDT 1998


-----Original Message-----
From: C Lamothe <clamothe at ameritech.net>
To: rc5 at lists.distributed.net <rc5 at lists.distributed.net>
Date: Tuesday, May 05, 1998 8:27 PM
Subject: [RC5] Hiding the NT service client


>I have the opportunity to clandestinely install the NT service client on
>several machines that are not actively administered.  Using one of my
>e-mail aliases, I can sufficiently conceal my identity (however a
>determined person could find my personal proxy).
>
>Is there a method of hiding the client from appearing on the task manager
>process list?
>
>So far I have come up with the following:
>
>1) Bury the client in the windows dir - no logs, no check file
>2) Rename the client to screensav.exe, NTservice.exe, NTidle.exe or
>something similar for the process list.
>3) Hex edit the exe to change the name of the service from "Distributed.Net
>RC5/DES Service Client" to "NT Service Client"
>
>but the best way would be not to have the client show in the process list
>at all.
>
>any suggestions?


Yes.  Don't do it.  It increases the likelyhood of giving our group and
cause a bad name.  We've already had enough trouble in that department.

Regards,

Paul "Froggy" Schneider




--
To unsubscribe, send 'unsubscribe rc5' to majordomo at lists.distributed.net
rc5-digest subscribers replace rc5 with rc5-digest



More information about the rc5 mailing list