[RC5] Hiding the NT service client

Jim C. Nasby nasbjim at charlie.cns.iit.edu
Wed May 6 12:48:37 EDT 1998


Yeah, my suggestion is not to install the client on any machine you don't
have permission to install it on. I believe someone has actually lost
their job because of this.

BTW, when you do ask for permission, I would suggest you market the client
as being part of a distributed computing project, rather then as a program
that is cracking an encrypted message... ;)

Moo!
dB!
distributed.net Human Interface

*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*

          /^\             Jim C. Nasby (aka Decibel!)
        /     \           nasbjim at charlie.acc.iit.edu
      /----+----\         Freelance lighting designer and database developer
    /      |      \       Member:
   +-------+-------+      Sports Car Club of America, Triangle Fraternity

*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*

On Tue, 5 May 1998, C Lamothe wrote:

> I have the opportunity to clandestinely install the NT service client on
> several machines that are not actively administered.  Using one of my
> e-mail aliases, I can sufficiently conceal my identity (however a
> determined person could find my personal proxy).
> 
> Is there a method of hiding the client from appearing on the task manager
> process list?
> 
> So far I have come up with the following:
> 
> 1) Bury the client in the windows dir - no logs, no check file
> 2) Rename the client to screensav.exe, NTservice.exe, NTidle.exe or
> something similar for the process list.
> 3) Hex edit the exe to change the name of the service from "Distributed.Net
> RC5/DES Service Client" to "NT Service Client"
> 
> but the best way would be not to have the client show in the process list
> at all.
> 
> any suggestions?
> 
> --
> To unsubscribe, send 'unsubscribe rc5' to majordomo at lists.distributed.net
> rc5-digest subscribers replace rc5 with rc5-digest
> 

--
To unsubscribe, send 'unsubscribe rc5' to majordomo at lists.distributed.net
rc5-digest subscribers replace rc5 with rc5-digest



More information about the rc5 mailing list