MSLV.exe

[Rob Keown <Keown () MACDIRECT COM>]

I am in heads down mode investigating an infection. The culprit is a file in
root of c: of an NT4 SP6 machine supposedly patched IIS.

MSLV.exe is in the root and contains Nimda-like exploit strings.

Don't have time to go into detail. Can't find reference to mslv.exe
anywhere.

Anyone know of this?

Rob Keown

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com