February 27th, 2005, 12:26 PM
Remote investigation for Trojan detection
To detect trojan infected hard disk, it is not possible to work in front of the computer, or to remove the hard disk from the computer.
I'm thinking about remote detection possibilities, for example with software line PC anymwhere or VNC.
What kind of solution do you use in this case ?
Could we use the netbios exploit, if the client shares the disk ?
Alain STEVENS, cyberdetective
Computer Forensics and Internet Investigations
February 27th, 2005, 02:38 PM