OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[Full-disclosure] undetected stuff downloaded by pnp worm

From: Willem Koenings (infsecgmail.com)
Date: Sat Sep 03 2005 - 20:20:20 CDT

Hi!

If anyone wants to play, then:

hxxp://www.darkfxp.net/dl/rootkit.exe

rar archive, inside is those files:

install.bat
xnet.exe
ssdpcl.dll
ssdpcl.exe

ssdpcl.exe creates the service SSDPCL, description
Provides Control for the SSDP Discovery Service,
display name SSDP Controller

As i have not time to analyze this, links to published
analyze or analyze sent to private mail is welcomed.

all the best,

W.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/