[Dshield] IRC Virus

Keith Bergen keith at keithbergen.com
Mon Sep 8 19:45:11 GMT 2003


NOTE. This contains a link to a virus. Take EXTREME caution 
with this.

Our IRC Network has been gettting the following:
MSG [1063047108] [funmikey] CRITICAL windows update here! --> 
http://www.turkcenter.com/justice/winsck32.exe

Once you unrar the exe file, it is a virus. I thought I would 
pass it on to the folks here in case somebody wants to take 
it apart and see how it works.

I notified the technical contacts of both the domain and the 
IP address, so hopefully it will be gone in a while.

Keith.
"Life is like an analogy"




More information about the list mailing list