Re: Trojan of somesort

[Harlan Carvey <keydet89 () yahoo com>]

Bob,

Did you happen to collect any volatile data from the
system before you pulled the plug?  Things like
running processes, installed services/device drivers,
network connections?  

> I am currently doing an investigation into a
> compromised system. Before 
> pulling the plug I netcatted to a suspicous open
> port and received the 
> following banner:
>           220 SiGN - FR33-FXP3rs - On Da FUcKiNG
> C@S£!!!
> I am presuming this to be the welcome banner for a
> trojan horse of some 
> sort. Has anybody seen this before or does anybody
> know anything about it or 
> what Trojan this might be?