From: Charles Tholen (ctholennetforensics.com)
Date: Thu May 13 2004 - 15:22:48 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

If <nickname> is not you then it is probably a bot in the IRC Channel that
is generating the messages. If <nickname> is you then it could be a new
piece of spyware/Trojan..

Regards,
Charles

------------------------------------
NetForensics
Charles Tholen, GSEC
Sr. Security Engineer
ctholennetforensics.com
1826 Countryside Dr.
Frisco, TX 75034
tel: (214)215-3586
------------------------------------
-----Original Message-----
From: caldcvstudents.fccj.org [mailto:caldcvstudents.fccj.org]
Sent: Thursday, May 13, 2004 9:04 PM
To: incidentssecurityfocus.com
Subject: New piece of spyware?

Hi,

 I have a Windows Server 2003 machine. Lately, I noticed on my mIRC IRC
client that something is pasting out ads to the current window.

[14:40] <nickname> New threat exploits flaw in Internet Explorer -
http://www.addict3d.org/index.php?page=viewarticle&type=news&ID=2039 ,
please support them by clicking the GOOGLE AD inside the articles on the
right.

[09:46] <nickname> Sasser worm author needs money -
http://addict3d.org/index.php?page=viewarticle&type=news&ID=2035 , also
please support us by clicking the AD inside the article on the right.

[09:55] <nickname> 'Doom' creator Id - soon to start on new game -
http://addict3d.org/index.php?page=viewarticle&type=news&ID=2030 , also
please support us by clicking the AD inside the article on the right.

[14:49] <nickname> please support http://www.addict3d.org (A computer
security website) by clicking a google AD, INSIDE the articles on the right.
Thanks alot. :]

This last ad was the first one I've seen. I've ran SpyBot S&D and Ad-aware
with no results. I've search Google for addict3d with no results either.

Thanks,

CC.

---------------------------------------------------------------------------
----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]