|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Strange services.exe file
From: Dano (dan
thejamzone.com)
Date: Mon Dec 08 2003 - 16:40:10 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Hello, I came across a strange services.exe file in WinXP and don't know
how it got there. This services.exe landed in the root
c:\windows\services.exe with a hidden attrib flag set. There was also a
registry key set at HKLM/software/microsoft/windows/currentversion/run
with the value "services C:\WINDOWS\services.exe -i". What it appeared to
do was send data back to hosts dhcp-ve3-101.cable.amis.net
(212.18.53.101) and um-sd04-907.uni-mb.si (164.8.15.109). I'm stil in
progress of disecting this to find out what exactly it does. Does anyone
know anything about this?
Thanks
Dan
---------------------------------------------------------------------------
----------------------------------------------------------------------------
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]