Trojans...you don't want 'em
Took me two days to find the bastard.
'Magine openin' Run... and seeing shit in there you know
you never typed. Slow-ass actions here and there, weird
shit goin' on that your cyber-belly is just tellin' you you
got visitors.
I found I had a Sub7 trojan server on one of the machines.
Where I got it? Phuk'd if I know. Too many *.zip/*.tar/*.tar.gz
decompressed on the weekend.
I had always assumed something would popup from the
firewall or VC if maliciousness was lurking in new shit...nadda
on the trojans. VC's don't even see them most of the time.
c:\windows\system\cmmpu.exe was the bastard. 78Kb of
pure 2-day hell. I had some shit in reg run* I had to nuke to.
I never would have known if those bastards hadn't of passed
my IP around. At one point netstat showed me with six of the
bastards hooked on me at the same time. And in the beginning
I thought it was the dozen ppl d/l'ing Ocean's 11 off of me via
Morpheus.
Watch your backs ppl...netstat and gut instinct on weirdness
is why I started to probe deeper.
Be careful out there.
|