Re: mIRC Zombie, port 445

[Tino Didriksen]

> When run, it will create C:\winnt\INF\other regardless of %windir% (an

This is part of an excellent suite of free command line remote administration tools called Pstools from Sysinternals.

http://www.sysinternals.com/ntw2k/utilities.shtml

I have seen some of these tools on compromised computers several times, especially psexec.exe, pskill.exe, psloggedon.exe and psinfo.exe.

Thanks for your information, BTW.

-- 
Andreas

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com