Backdoor.Redkod

From: H C <keydet89(at)yahoo.com>
Date: Wed Feb 26 2003 - 14:39:45 EST

>From Symantec:

http://www.sarc.com/avcenter/venc/data/backdoor.redkod.html

This description includes the following functionality:

• Patch Netstat so that the network connections of the backdoor cannot be seen.

Does anyone know how this is done? Also, how does this work if netstat.exe is "protected" by WFP?

Thanks.

---

Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/ Received on Wed Feb 26 16:44:44 2003