Re: Rcon trojan

[Tom Gerritsen <jabba () home nl>]

Op maandag 4 maart 2002 18:08, heeft  Owen Creger ons proberen te vertellen:
> rcon

try to google 
http://www.google.nl/search?q=rcon+trojan&hl=nl&lr=


I got this hit that you can use.

http://www.glocksoft.com/trojan_list/Rcon_Recon_Xcon.htm

Looks like some registry hacking.
Just go into regedit and press ctrl+f   enter runonce to search for. If he 
finds it, above it you'll find the run key.  (searching for the word run 
takes to long, because the registry is full of it... ) Do this something like 
3 times, because the run key is used more then once.. 



-- 
GreetZz
                        Tom Gerritsen
                        jabba () home nl


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com