CS: Are you familiar with Norman Antivirus? They say it can detect Haxdoor on an infected computer.

Corpse: Anti-virus applications can't find the undetectable version.

The Trojan includes a graphical user interface that the attacker can use for designing a tailor-made attack on a specific bank. Corpse confirms that the Trojan is activated when a specific phrase, such as "scratch code 1," appears on a Web page. It picks up the information and forwards it. It's quite simple, he insists.

Corpse: The interface is standard and requires no special skills. If you have any problems, I'll help.

Like any salesman, Corpse boasts about Haxdoor's usefulness for successful bank frauds.