|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
rpc sdbot
From: Daniel Otis-Vigil (dvigil
moosoft.com)
Date: Wed Aug 13 2003 - 12:04:25 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
This sdbot variant has been spreading around Undernet and is a combination
of the msblast worm, sdbot and spybot. It installs as a service and
triggers WFP which I think was a mistake. Termination of the process
causes an immediate reboot.
Samples are available here: http://www.moosoft.com/thecleaner/rcpsdbot.zip
password is: infected
Daniel Otis-Vigil
MooSoft Development LLC
http://www.moosoft.com/thecleaner
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]