[21646] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Troyans - this is bad

daemon@ATHENA.MIT.EDU (alex@relcom.EU.net)
Tue Nov 17 18:35:38 1998

Date: Wed, 18 Nov 98 01:30:27 +0300
To: alex@relcom.EU.net, greg@rage.net
Cc: mikef@boris.talentsoft.com, nanog@merit.edu
From: alex@relcom.EU.net

Btw. Remember - not only troyaned files are the problem, but some
additional services can (and WAS) be added into the system. Like
special version of ssh.

This case no MD5 checksumms differ from the distribution, but
you should detect additional ports open for the listening.


--- 
Aleksei Roudnev, Network Operations Center, Relcom, Moscow
(+7 095) 194-19-95 (Network Operations Center Hot Line),(+7 095) 239-10-10, N 13729 (pager)
(+7 095) 196-72-12 (Support), (+7 095) 194-33-28 (Fax)

home help back first fref pref prev next nref lref last post