Re: Rcon trojan

From: Tom Gerritsen (jabbaat_private)
Date: Mon Mar 04 2002 - 14:39:04 PST

  • Next message: Christopher Samuel: "Re: Solaris hack"

    Op maandag 4 maart 2002 18:08, heeft  Owen Creger ons proberen te vertellen:
    > rcon
    
    try to google 
    http://www.google.nl/search?q=rcon+trojan&hl=nl&lr=
    
    
    I got this hit that you can use.
    
    http://www.glocksoft.com/trojan_list/Rcon_Recon_Xcon.htm
    
    Looks like some registry hacking.
    Just go into regedit and press ctrl+f   enter runonce to search for. If he 
    finds it, above it you'll find the run key.  (searching for the word run 
    takes to long, because the registry is full of it... ) Do this something like 
    3 times, because the run key is used more then once.. 
    
    
    
    -- 
    GreetZz
    			Tom Gerritsen
    			jabbaat_private
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Mon Mar 04 2002 - 19:56:33 PST