Re: pnp worm unknown variant - post infection actions

["Morning Wood" <se_cur_ity () hotmail com>]

> Does it install child pornographic malware, or have you confirmed that
> all of the exposed genitalia are attached to a natural person who is
> more than 18 years of age?
>
> Regards,
>
> Jason Coombs
> jasonc () science org

i only noted the malware address 'http://install.xxxtoolbar.com";
i did not test the xxxtoolbar malware itself

wtf would you ask that anyway?
I am simply pointing out that the worm is being used by malware enities to
distribute their malcode

cheers,
Donnie Werner
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/