Re: Scanning for trojans

Is this a windows based trojan ? if so you could write a quick NASL plugin checking remote registry for this trojan and get network output.

I guess we ( I ) would need more information on the trojan, atleast the platform OS that you believe is contaminated.

~!>D

Discussion Lists wrote:

>Hi all,

-- 
------------------------------------------
      Network Security Engineer 
      
http://www.angrypacket.com
       Christopher M Downs,RHCE
     cdowns@bigunz.angrypacket.com
	
   char ash[]="\x48\x61\x69\x6C\x20"
   "\x74\x6F\x20\x74\x68\x65\x20\x4B"
   "\x69\x6E\x67";
-------------------------------------------




---------------------------------------------------------------------------
Did you know that you have VNC running on your network?
Your hacker does.
Plug your security holes.
Download a free 15-day trial of VAM:
http://www.securityfocus.com/StillSecure-pen-test
----------------------------------------------------------------------------