Re: Sears Scam Trojan Code

[Jarkko Turkulainen <jt () klake org>]

Took some time to realize, but the proxy is a standard SOCKS V4. What's
interesting, the proxy port is chosen by the system (next port
available) and it's announced every 30 secs to cjdra.com as indicated in
the earlier post. The cjdra.com IP also seem to change very often..
That's all, I guess.


Regards,

--
Jarkko Turkulainen <jt () klake org>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html