Re: Virus infect on single user

["morning_wood" <se_cur_ity () hotmail com>]

> I noticed that the file was last modified a day that i ddin't open my pc. Is
there any change for that file to have >attributes than the real one?

not uncommon for date manipulation with trojans. Beast 2.05 uses activeX
startup routines and file date manipulation of the files ( files are dated
8/23/2001 ).


Donnie Werner
morning_wood () exploitlabs com
http://exploitlabs.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html