Snort-Ids.Trinoo

Overview

Vendor Description

Rules for the Snort IDS to detect trinoo. This rules work only as long as the ports/passwords/protocol arent changed.

Category

DDoS: A Distributed Denial of Service (DDoS) attack is one that pits many machines against a single victim. An example is the attacks of February 2000 against some of the biggest websites. Even though these websites have a theoretical bandwidth of a gigabit/second, distributing many agents throughout the Internet flooding them with traffic can bring them down. The Internet is defenseless against these attacks. The best defense is for users everywhere to run PestPatrol, and remove DDoS clients when they are found, so that their machines are not used as attack tools. Another approach is for ISPs to do ""egress filtering"": prevent packets from going outbound that do not originate from IP addresses assigned to the ISP. This cuts down on the problem of spoofed IP addresses.

Origins

Author

Stefan Aeschbacher

Date of Origin

December, 1999

Detection and Removal

Manual Removal

Follow these steps to remove Snort-Ids.Trinoo from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Sniffy.c Sniphere Snoop Snoops.Id.Maker Snort Snort-Ids.Trinoo SnortWatch0.7 Snowdoor Snowdoor1.3 Snowdoor1.7