Ask the Expert

Finding detailed virus definitions

I am currently examining a computer, which has been infected by the Trojan horse backdoor.litmus. (I am a forensic computer examiner.) This file was in a folder called img32b and was named image32.exe. I am trying to ascertain precisely what this virus is capable of, because I may need to explain it to a court. All I seem to be able to locate are generic descriptions, which potentially describe all Trojan horse viruses. Can you recommend a good resource for virus definitions?

    Requires Free Membership to View

First of all, I would suggest that anyone looking for info on specific viruses, worms, Trojan horses and other malware consult various vendor sites. I have about 15 of them bookmarked for when I need to find something.

In this case, I asked my friends over in AVI-EWS about this critter and got a number of replies. Amongst them, was the fact that this Trojan horse exists in numerous variants. Here is one of those descriptions.

In the case of virus forensics, I'd suggest that you check in with a virus specialist, either at a vendor or via AVIEN.


For more info on this topic, visit these SearchSecurity.com resources:
  • Best Web Links: Common vulnerabilities and prevention tips
  • Ask the Expert: What is the future of computer forensics?

    This was first published in October 2003

  • There are Comments. Add yours.

     
    TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

    REGISTER or login:

    Forgot Password?
    By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
    Sort by: OldestNewest

    Forgot Password?

    No problem! Submit your e-mail address below. We'll send you an email containing your password.

    Your password has been sent to: