Re: any useful links on trojans/RAT's?

["KoRe MeLtDoWn" <koremeltdown () hotmail com>]

Hamish Stanaway

-= KoRe WoRkS =- Internet Security
Owner/Operator
http://www.koreworks.com/

New Zealand

Is your box REALLY secure?





> From: H C <keydet89 () yahoo com>
> To: security-basics () securityfocus com
> Subject: Re: any useful links on trojans/RAT's?
> Date: Fri, 15 Nov 2002 03:38:26 -0800 (PST)
> MIME-Version: 1.0
> Received: from outgoing.securityfocus.com ([205.206.231.26]) by 
> mc5-f34.law1.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Sun, 17 Nov 
> 2002 10:19:00 -0800
> Received: from lists.securityfocus.com (lists.securityfocus.com 
> [205.206.231.19])by outgoing.securityfocus.com (Postfix) with QMQPid 
> 4B714964EB; Fri, 15 Nov 2002 15:32:31 -0700 (MST)
> Received: (qmail 4121 invoked from network); 15 Nov 2002 11:06:41 -0000
> Mailing-List: contact security-basics-help () securityfocus com; run by ezmlm
> Precedence: bulk
> List-Id: <security-basics.list-id.securityfocus.com>
> List-Post: <mailto:security-basics () securityfocus com>
> List-Help: <mailto:security-basics-help () securityfocus com>
> List-Unsubscribe: <mailto:security-basics-unsubscribe () securityfocus com>
> List-Subscribe: <mailto:security-basics-subscribe () securityfocus com>
> Delivered-To: mailing list security-basics () securityfocus com
> Delivered-To: moderator for security-basics () securityfocus com
> Message-ID: <20021115113826.72220.qmail () web20505 mail yahoo com>
> Return-Path: 
> security-basics-return-16036-koremeltdown=hotmail.com () securityfocus com
> X-OriginalArrivalTime: 17 Nov 2002 18:19:00.0191 (UTC) 
> FILETIME=[CCFF26F0:01C28E65]
>
> > 2.  Typically, the most common.  BO2k, Subseven,
> etc.
>
> Really?  What makes you say that?
Its a known fact.. thats what NAI etc encounter the most - they are the most 
common script kiddie trojans. And lets face it many script kiddies canm in 
fact use BO2k...

> >  What you're going to have the most difficulty with
> > however, are likely to be newer tunneling trojans,
> and
> > the like.
>
> Such as?  Can you name a few, and describe why they
> would give someone the most difficulty?
>
> Thanks,
>
> Carv
>
>
>
>
>
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Web Hosting - Let the expert host your site
> http://webhosting.yahoo.com


_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE*  
http://join.msn.com/?page=features/junkmail