Full Disclosure mailing list archives

Worm phone home site question


From: odinanne <odinanne () comcast net>
Date: Mon, 26 Sep 2005 22:46:12 -0600

210.240.39.40  tcp 2255, 5522, 9009

This is the phone home site for a worm found on the network. Any idea what service they are running on these ports or how to loggin or register?

This is the worm. http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FSDBOT%2ECGY&VSect=P



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: