Re: ftp warez server snake ?

[H Carvey <keydet89 () yahoo com>]

In-Reply-To: <200412072214.18019.andreas () inferno nadir org>


> Anyone recognize this one? 

Given how easy these things are to manipulate, it could be anything.

I know you said that you don't have physical access, but do you have remote admin access, or know someone who does?  If 
so, could you get copies of the executable image files for these processes, perhaps any configuration files, dumps of 
process memory, etc?  These would go a long way toward helping you figure out what this stuff is.

H. Carvey
http://www.windows-ir.com
http://windowsir.blogspot.com