[nycbug-talk] Cdorked.A Backdoor

Chris Snyder chsnyder at gmail.com
Fri May 10 10:13:35 EDT 2013


On Thu, May 9, 2013 at 8:17 PM, Pete Wright <pete at nomadlogic.org> wrote:

>
> had some cycles to dig deeper - found a python script from eset.ie that
> they believe will detect this code.  it's pretty simple - so i'm not sure
> how reliable it is tbh.



Isn't detection a matter of comparing the system's httpd to a known-clean
binary?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nycbug.org/pipermail/talk/attachments/20130510/11d8da38/attachment.html>


More information about the talk mailing list