OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-Disclosure] New virus?

From: stephane nasdrovisky (stephane.nasdroviskyparadigmo.com)
Date: Wed Mar 02 2005 - 10:38:10 CST

Matthew Burling wrote:

> C:\windows\system32\dxmsrv.exe
> C:\windows\system32\winmes.exe

Submit your suspicious file to norman sandbox (
http://sandbox.norman.no/live_4.html ), it will tell you if these are
bots contacting their 0wner via some irc channel and other suspicious
activity.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html