> Is this 'mechanism' very common and is it difficult to detect by AV?
No, but you have to be damned careful removing something installed as an
LSP. I've seen literally hundreds of PCs with their network stack
buggered because the owner tried to remove NewDotNet. NewDotNet inserts
itself as an LSP...
No, but you have to be damned careful removing something installed as an
LSP. I've seen literally hundreds of PCs with their network stack
buggered because the owner tried to remove NewDotNet. NewDotNet inserts
itself as an LSP...
[ more ]