Re[4]: [Full-disclosure] Re: Know Your Enemy: Tracking Botnets (ThorstenHolz)

[Egoist <mastah@xxxxxxxxxxxx>]

Hello Valdis,

Monday, March 14, 2005, 9:51:20 PM, you wrote:

VKve> On Mon, 14 Mar 2005 21:22:26 +0300, Egoist said:

>> > >> We start with an introduction to botnets and how they work, with
>> they work perfectly if coded not by kids, they use crypted
>> communication, most of them moving to p2p technology to eliminate
>> servers
>> i dont say about that lame toolz like agobot and friends

VKve> Have to admit, for such a lame tool as agobot, it's certainly nailed a lot
VKve> of systems. ;)

Lot of systems? Where you get that statistic ? How do u analyze that?
Antivirus software catched agobot on some computer and you just increment 
counters? So
if it isnt catched it seems like computer is clean? _Do_ you
really sure your computer is not part of big botnet where stealthness
is the premium function?




-- 
Best regards,
 Egoist                            mailto:mastah@xxxxxxxxxxxx


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://www.secunia.com/