Re: pnp worm unknown variant - post infection actions

[Jason Coombs <jasonc () science org>]

Morning Wood wrote:
> the .reg files disable IE Security settings
>
> update.html contains...
...
> which installs pornographic malware.

Donnie,

Does it install child pornographic malware, or have you confirmed that 
all of the exposed genitalia are attached to a natural person who is 
more than 18 years of age?

Regards,

Jason Coombs
jasonc () science org
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/