[Full-disclosure] Trojan found on Linux server

Morning Wood se_cur_ity at hotmail.com
Mon Jan 2 22:01:01 GMT 2006


> Yep, when running "strings" on it I noticed a few IP addresses 
> (219.133.46.212, 61.211.239.84, 64.239.9.236) in there as well as 
> commands indicative of IRC ("NOTICE", "NICK", "PRIVMSG", etc.)

64.239.9.236 = copticpope.tv
http://64.239.9.236/  http://copticpope.tv heh?

















Full-Disclosure is hosted and sponsored by Secunia.