OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: interesting file in NT server
From: Auke Rensen (amrensenCASEMA.NET)
Date: Wed May 24 2000 - 01:26:11 CDT

Ik recognize the appearance of those .exe files.
The only place where I found these .exe files in de TEMP dir, was at the
university of Delft, Holland.
I suspect that the files aren't created bij NT, but by certain software.
Maybe AutoCAD or PQMagic is responsible?

Auke Rensen
MCSE+I, A+, Network+ Certified

----- Original Message -----
From: "Volney Lustosa" <vlustosaTBA.COM.BR>
To: <FOCUS-MSSECURITYFOCUS.COM>
Sent: Wednesday, May 24, 2000 3:33 AM
Subject: interesting file in NT server

> Hi friends,
>
> I am a brazilian trainee and i work in a university. Recently the system
> administrator found a suspect file in the temp directory of a NT server
> machine. Is a exe file that shut down and restarts the server when
> executed.
> Anyone knows how it could be there? Is it a file created by some
> microsoft program ?
>
> for the courageous i am sending a copy oh the file.
>
>
>
> ______________________
> ----------------------
> Volney Gadelha Lustosa
> vlustosatba.com.br
> ______________________
> ----------------------
>
> /"\
> \ / Campanha da fita ASCII - contra mail html
> X ASCII ribbon campaign - against html mail
> / \