Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos

Security Basics: Re: 543.rar attachment

Re: 543.rar attachment

From: Andrew Pretzl <arp_at_norlight.com>
Date: Fri, 4 Mar 2005 13:18:29 -0600

The dddd.exe file is some manner of malware (spyware I believe). The
543.rar is probably some random name chosen to try to disguise the dddd.exe
payload.
AP
-
=============================
Andrew Pretzl - CISSP
Security Administrator
Norlight Telecommunications
http://www.norlight.com
=============================
"Quis custodiet ipsos custodes?"


                                                                                                                                       
                      "Ju Ne"
                      <ddjjembe1_at_hotmai To: security-basics_at_securityfocus.com
                      l.com> cc: (bcc: Andrew Pretzl/Brookfield/Norlight)
                                               Fax to:
                      03/04/2005 11:12 Subject: 543.rar attachment
                      AM
                                                                                                                                       
                                                                                                                                       




We have been receiving an influx of emails that contained an attachment
called 543.rar. Inside this .rar is an executable called dddd.exe. Does
anyone know more information about this executable?

june

_________________________________________________________________
Don’t just search. Find. Check out the new MSN Search!
http://search.msn.click-url.com/go/onm00200636ave/direct/01/


Received on Mar 07 2005

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]