W32.Badtrans.B@mm

From: Liudvikas Bukys (bukysat_private)
Date: Mon Nov 26 2001 - 13:30:54 PST

Next message: Marc Fossi: "Re: W32.Badtrans.B@mm"

Previous message: Patrick van Zweden: "any1 stumbled across eCkit ?"
Next in thread: Marc Fossi: "Re: W32.Badtrans.B@mm"
Reply: Marc Fossi: "Re: W32.Badtrans.B@mm"
Reply: John Sage: "Re: W32.Badtrans.B@mm"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I am dismayed to find that ALL of the anti-virus vendors have decided to
limit their "tech details" so much that I can't find a published account
of how the keyboard-logging trojan contacts the outside world.  It would
be helpful to know what hosts or names it connects out to, without having to
wait for a "live one" to appear to before I find out.

Does anybody here know?

Liudvikas Bukys
bukysat_private

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Marc Fossi: "Re: W32.Badtrans.B@mm"
Previous message: Patrick van Zweden: "any1 stumbled across eCkit ?"
Next in thread: Marc Fossi: "Re: W32.Badtrans.B@mm"
Reply: Marc Fossi: "Re: W32.Badtrans.B@mm"
Reply: John Sage: "Re: W32.Badtrans.B@mm"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Nov 26 2001 - 13:36:26 PST