Bugtraq mailing list archives
Re: Warning to bugtraq posters.
From: steve () CELL2000 NET (Steven Alexander)
Date: Wed, 22 Dec 1999 08:54:48 -0800
It appears that the file I received installs a new goal.exe in C:\Winnt which is set to run on startup. Disassembly of the file reveals that it gathers information about my machine from the registry and attempts to recover my netscape password from prefs.js. It then emails the information to mike () aol com. I will post a dissasembly of both files on my website http://www.cell2000.net/security/ -steven alexander
Current thread:
- Re: Warning to bugtraq posters. Steven Alexander (Dec 22)