I bow to your superior google skills. My spanish is horrible, but my
boss happens to be Puerto Rican. :-)
Checking for stde9 (the installer), you find it's pretty common among
many of the trojans. So, this isn't entirely new work, itself. The
mIRC, the installer, even the packet streaming utility are all
recycled. It's the command/control function that might be of more
interest.
On Friday, March 7, 2003, at 06:35 PM, Alex Lambert wrote:
> Googling for columbus.private.net (the server's asserted 'name'), a few
--
Andy Shelley
Cbeyond Communications
andy@cbeyond.net
----------------------------------------------------------------------------
Lose another weekend managing your IDS?
Take back your personal time.
15-day free trial of StillSecure Border Guard.
http://www.securityfocus.com/stillsecure">
http://www.securityfocus.com/stillsecure
Received on Mon Mar 10 12:32:01 2003
This archive was generated by hypermail 2.1.8
: Wed Aug 23 2006 - 14:01:59 EDT
|