[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-disclosure] Worm phone home site question



210.240.39.40  tcp 2255, 5522, 9009

This is the phone home site for a worm found on the network. Any idea what service they are running on these ports or how to loggin or register?

This is the worm. http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FSDBOT%2ECGY&VSect=P




_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/