-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yigit Turgut wrote:
> Virus infecting the tcp stack ? there is no infection methodolgy like that.
> 

There is dll injection. more than once I have come across a virii that
sprays a dll into as many threads as it can manage. I'm suggesting it is
no great leap to re-write a component of the tcp/ip stack or unload hooks
from it.

- --
Brendan Gillatt | GPG Key: 0xBF6A0D94
brendan {a} brendangillatt (dot) co (dot) uk
http://www.brendangillatt.co.uk
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFJn/Tgrlc7Stqch40RAl2dAJ48dDRUVSV+4aIzClXBC65/MxUw+QCcD5LY
Z4C8gl8jgrbolFfi1h26kdc=
=oR6v
-----END PGP SIGNATURE-----
-- 
http://www.piclist.com PIC/SX FAQ & list archive
View/change your membership options at
http://mailman.mit.edu/mailman/listinfo/piclist