Re: Is it possible to modify a running process?
Posted on 2003-02-07, 15:26
Thanks a lot for all this info! I didn't know that debuggers could attach to processes. That's very interesting, and perhaps it's the method that Elkern.C uses to infect all processes in memory. However, I was able to remove the virus from memory using a tool distributed freely by Symantec: http:// …