PDA

View Full Version : Doz attack ip2pc


_netmaster_
03-12-2007, 08:09 PM
*BANNED (trojan spreading with no disclaimer)*
Ezekiel
03-13-2007, 04:10 PM
http://www.rogepost.com/n/**84*86748 control t ip

Out of boredom I ran a quick grep -UGa .com webcammax.exe, which gave me these lines:

Contact: support@poisonivy-rat.com
http://swerat.com
http://www.poisonivy-rat.com
http://chasenet.org

Don't you people usually use packing tools on malicious software to stop these revealing text strings from remaining?
D.Parker
03-13-2007, 10:25 PM
Out of boredom I ran a quick grep -UGa .com webcammax.exe, which gave me these lines:

Contact: support@poisonivy-rat.com
http://swerat.com
http://www.poisonivy-rat.com
http://chasenet.org

Don't you people usually use packing tools on malicious software to stop these revealing text strings from remaining?

Thanks for the info, the user has been banned.