Full Disclosure mailing list archives
Re: new trojan
From: Raymond Dijkxhoorn <raymond () prolocation net>
Date: Sat, 27 Sep 2003 00:53:42 +0200 (CEST)
Hi!
irc.elite-irc.net 6667 crystal.elite-irc.net 7000 darwin.elite-irc.net 6667 killer.elite-irc.net 6667 It also tries to connect outbound to fuel.pyroshells.com, dnsix.com and 192.168.0.1.irc.elite-irc.net lists the IP of fuel.pyroshells.com in their round-robin setup. I know the admin of pyroshells and just contacted him regarding this matter. The IRC server on pyroshells is most likely not their users fault, non-the-less it has been suspended until it is investigated.
To what channel do the bots connect? It might be a good idea to make to let them close that particular channel. Bye, Raymond. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- new trojan Hummer Marchand (Sep 26)
- <Possible follow-ups>
- RE: new trojan Stephen Blass (Sep 26)
- Re: new trojan David (Sep 26)
- Re: new trojan Raymond Dijkxhoorn (Sep 26)
- Re: new trojan David (Sep 26)
- RE: new trojan Schmehl, Paul L (Sep 26)
- RE: new trojan Stephen Blass (Sep 26)