4 ms·
For Vista and 7, I believe that the much-hated-by-numpties User Account Control should prevent this from happening I think the idea was that the USB device wou
by omh 16y ago
For Vista and 7, I believe that the much-hated-by-numpties User Account Control should prevent this from happening
I think the idea was that the USB device would include a keyboard and that this would press the keys required to confirm UAC.
This wouldn't work if the machine was locked, and if the user could see the screen then they'd at least notice it.
- JonnieCache 16y agoIn a past thread about hardware exploits, someone suggested simply having a device that poses as a keyboard and then types out the source of a rootkit and compiles it. Or even just type the binary straight onto the disk somehow. That my friends, is genius. Credit goes to whoever suggested it originally.
- sp332 16y agoIt is possible to make a pure-ASCII executable. http://mirror.href.com/thestarman/asm/eicar/eicarcom.html http://mirror.href.com/thestarman/asm/eicar/eicarcom.html
- daeken 16y agoI don't see how you could do this for PE files, which would be required to pull this off on x64 (since you can't run 16-bit binaries like .COMs). There are several fields in the headers that require non-ASCII values.
- limmeau 16y agoWith PowerShell or WSH?
- gus_massa 16y agoThis link is very interesting. I thought incorrectly that it was only a random string. You should submit the link.
- saw-lau 16y agoFair play - I stand corrected.