icq2000

[griffinb () HOTKEY NET AU (Brad Griffin)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all. I did some searching and some hex viewing etc etc.
It appears that all ICQ2000 is, is a carrier for a worm that will send
a link to the ICQ2000 download site. I *think* it uses your UIN to pick
random users to post to. I'm still checking though. It was written
using Borland Delphi (which version?) and also uses some off-the-shelf
tools from www.netmastersllc.com
It is also doing something with IE.
Catchyas,

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1 -- QDPGP 2.60
Comment: http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0x6FD78581

iQA/AwUBOBTnOgiK90dv14WBEQKusQCfUe6MYRiqKuF26Ab+rDR2AxWih58AoO5D
QYb9H7X/iUOqANn6sCJP4yZY
=bXDD
-----END PGP SIGNATURE-----
Brad Griffin
Infotech undergrad & e-mail addict
CQU Rockhampton, Australia
Useful links:
http://www.pgpi.org/
http://spamcop.net/
http://www.avp.ru/