[nycbug-talk] Cdorked.A Backdoor

[Chris Snyder]

On Thu, May 9, 2013 at 8:17 PM, Pete Wright <pete at nomadlogic.org> wrote:

>
> had some cycles to dig deeper - found a python script from eset.ie that
> they believe will detect this code.  it's pretty simple - so i'm not sure
> how reliable it is tbh.



Isn't detection a matter of comparing the system's httpd to a known-clean
binary?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20130510/11d8da38/attachment.htm>