> Mark W. Breneman wrote:
> > True it probably would show in the task or process lists, but if I were
> > to write a worm/Trojan, I would make it show up in the task list as
> > SVCHOST.exe, the generic name of a DLL process.
>
> 1. You know how many of those you have on your server.
> 2. tlist will show the application names behind svchost.exe
If I was writing a worm/Trojan, I'd have it patch the relavent system calls
and therefore hide from the Tasklist.
--
Tom Chiverton
Advanced ColdFusion Programmer
Tel: +44(0)1749 834997
email: [EMAIL PROTECTED]
BlueFinger Limited
Underwood Business Park
Wookey Hole Road, WELLS. BA5 1AF
Tel: +44 (0)1749 834900
Fax: +44 (0)1749 834901
web: www.bluefinger.com
Company Reg No: 4209395 Registered Office: 2 Temple Back East, Temple
Quay, BRISTOL. BS1 6EG.
*** This E-mail contains confidential information for the addressee
only. If you are not the intended recipient, please notify us
immediately. You should not use, disclose, distribute or copy this
communication if received in error. No binding contract will result from
this e-mail until such time as a written document is signed on behalf of
the company. BlueFinger Limited cannot accept responsibility for the
completeness or accuracy of this message as it has been transmitted over
public networks.***
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
