Re: Sourceforge.net has virus ? -
29-02-2004
It's based on the well-known "Back Orifice" trojan, which was used as such (and was indeed developed to be a trojan and not a "lightweight remote administration tool"). The server's executable name is called " .exe" (char. #255 dot exe) and has a blank icon (muhahahaha. Nice try, kids.)
Most of the people who had a "Back Orifice" server on their machine were in fact infected without knowing it. That's why the anti-viruses immediately classed it into the Trojans section. BO2K seems to be a descendant of the original BO.
RACC home - Bots-United: beer, babies & bots (especially the latter)
"Learn to think by yourself, else others will do it for you."
|