To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
...it's not a botnet, but it will become in a while....

Probably, another variant of PWSteal.Metafisher, not yet detected:
hXXp://deagtea.com/xpl.wmf (wmf exploit, will download 1.exe)
hXXp://deagtea.com/1.exe (downloader, will download installer.exe)
hXXp://deagtea.com/installer.exe (installer, drops a trojan BHO)

It was spammed by mail today.

EF

PS: the bot is almost identical to the one reported by Eric Sites
on UKSTORIES
_______________________________________________
botnets mailing list
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets

Reply via email to