Re: [Full-Disclosure] New virus?

[stephane nasdrovisky <stephane.nasdrovisky@xxxxxxxxxxxxx>]

Matthew Burling wrote:

> C:\windows\system32\dxmsrv.exe
> C:\windows\system32\winmes.exe

Submit your suspicious file to norman sandbox ( 
http://sandbox.norman.no/live_4.html ), it will tell you if these are 
bots contacting their 0wner via some irc channel and other suspicious 
activity.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html