Trojan Horse Detector

How do you find a chameleon Trojan horse attack when there are no file contents to scan for?

THD is your answer. The chameleon Trojan horse attack works because a user is able to redirect a system command to a program of the same name in a different location. The chameleon may or may not have contents. If the chameleon has contents then it can be located using VFind™ . If it does not have contents then THD can locate it because by definition the filename must have the same name as another program on the system or the attack will not work.

>back