RE: interesting trojan found

["Willem Koenings" <isec () europe com>]

hi,

> But if it is a rootkit, does it not hide from normal AV scanning?

It's more like a worm. But it hides its presence in the file
system, when it's active - dirlist doesn't show it, so you can't
scan it like a file.

all the best,

W.


-- 
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html