Study on a New Type of Trojan Horse Based on SPI and Remote Thread

SHI Yong,XUE Zhi,LI Jianhua

DOI: https://doi.org/10.3969/j.issn.1000-3428.2005.07.053

2005-01-01

Abstract:A new trojan horse on Windows operating system is presented. This technology combines SPI which is a new characteristic in Winsock 2 with remote thread injecting in Windows kernel and DLL(dynamic-link libraries) in Windows file system. And it uses some characteristics in filtration and interrupt of firewalls for reference. A new trojan horse hiding style is realized.