>I'm writing a paper about trojans and would like to view the source code
>for BO2k. Does anyone know where it is located on the web?
>
Hi,
If you have any problem finding source code, mail me. I have source code
from 23 different trojans including BO2K. I�m prepaired to help you. Also
take a look at http://www.simovits.com/nyheter9902.html where you can find
a large number of default trojan ports. I will be updated in a couple of
days with some 70 or 80 new entries, and I�ll let you know when the update
has been published.
Some comments to the other findings on the list. Of course BO2K is a
trojan. It hides from the user and is usually tricked on users by people
who want to hack there computers. I would had been more like pcAnywhere if
it was working openly and if it had fixed ports. It has default ports -
54320 for TCP and 54321 for UDP, but that could easily be changed. It can
use at least six different cryptos to make it impossible for system
administrators or others to listen to the traffic. And I have seen plenty
of examples with BO trojans hidden as something else or wrapped inside
other exe-files. BO2K is a hostile program and should be stopped where ever
it is found.
Good luck with your paper and please fell free to get back to me with
questions, source codes or what ever. We need more research in the trojan
field because Microsoft was stupid enough to let users run programs in a
invisible mode (who needs that?) and because there is no effective way to
stop unknown trojans to infect you. Most anti virus and anti trojans
software are more or less security jokes and soon we will se trojans that
couldn�t be stopped by firewalls or intrusion detection systems.
Keep up your work on BO2K and don�t let the load of desinformation make you
unsure of the necessity of your paper!
Greeting,
Joakim
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]