OGLE Internet Server Extension

Overview

Vendor Description

From the doc: 'This is a quick fix to allow .htr files therefore not breaking of functionality such as /iisadmpwd/. Some companies were asking if there was a possible way to fix the .htr hole without removing the .htr ISAPI filter. Here is the fix to do so. The filter patch we created will limit all .htr requests to 255 characters, therefore if someone tries the overflow it will get cut off and will never happen. Also, the IP address of the person trying the overflow is logged. This is a great deal better then the current recommendation from Microsoft to just remove the .htr ISAPI filter.'

Origins

Group

EEye Digital Security Team

Others By This Group

IIS4Hack· Tesoiis.c·

Date of Origin

June, 1999

Detection and Removal

Manual Removal

Follow these steps to remove OGLE Internet Server Extension from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Unregister DLLs:

Unregister these DLLs with Regsvr32, then reboot:

Remove Files:

Remove these files (if present) with Windows Explorer:

O97MStars O97MSugar.A O97MSugar.C O97MTristate.C OEKiller OGLEInternetServerExtension OHMaKeR OICQPassCopy1.1 OICQSearch OICQSearch1.3