Home page logo

basics logo Security Basics mailing list archives

Re: Hidden windows ports, files and services.
From: Barrie Dempster <barrie () reboot-robot net>
Date: Tue, 21 Dec 2004 10:01:31 +0000

On Mon, 2004-12-20 at 17:01 -0500, Mark Reis wrote:
Hello Again,

I've discovered the answer to part 2 - the machine was infected by a 
root kit

Good feedback, but can you please tell us.
1. How you discovered the rootkit
2. What rootkit it was
3. Exactly what was modified (if you recorded the information)

I'd like this out of personal curiosity but it would be beneficial for
any victims in the future, searching the web for symptoms they have, to
find a post that explains what is causing it.
Thanks in advance.

With Regards..
Barrie Dempster (zeedo) - Fortiter et Strenue


[ gpg --recv-keys --keyserver www.keyserver.net 0x96025FD0 ]

Attachment: signature.asc
Description: This is a digitally signed message part

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]