Re: Subject: Some suspicious files

["dila" <dila () myrealbox com>]

possibly a beta version of a connect back trojan.

seems to be able to use a website to transfer information between the
attacker and the infected machine.

how did you come to obtain it?

> Hi all,
>
> there are so many people interested I don't wanna send each of you
> a single mail so I'll put it to my webserver. It would be nice if
> someone would mirror it because this "web server" is not a business
> server, it's my own PC :)
>
> http://temp.gameszone.kicks-ass.net:180/temp/fd/
> irc_files.zip, 278 KB
>
> Yours, Marcel
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html