Re: Subject: [Full-Disclosure] Some suspicious files

["dila" <dila@xxxxxxxxxxxxx>]

possibly a beta version of a connect back trojan.

seems to be able to use a website to transfer information between the
attacker and the infected machine.

how did you come to obtain it?

>Hi all,
>
>there are so many people interested I don't wanna send each of you
>a single mail so I'll put it to my webserver. It would be nice if
>someone would mirror it because this "web server" is not a business
>server, it's my own PC :)
>
>http://temp.gameszone.kicks-ass.net:180/temp/fd/
>irc_files.zip, 278 KB
>
>Yours, Marcel
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html