How to B-Have on the Internet Romanian IT&C Security Forum Sep 25, 2007
Agenda Romanian Bot Nets “Alo, virusul?” sau VoIP – Virus over IP “Experti” in antivirusi Cum stam?
Romanian Bot Nets Backdoor.IRC.Zapchast
Romanian Bot Nets Backdoor.IRC.Zapchast [servers] n1=lol.conf.ro SERVER: lol.conf.ro:6667GROUP:servere n422=EU, AT, Graz2SERVER:graz2.at.eu.undernet.org:6660- 6670,7000GROUP:serveree
Romanian Bot Nets Backdoor.IRC.Zapchast [users] n1=100:*!*@TeReNTe.users.undernet.org n2=100:*!*@100DeMii.users.undernet.org n3=100:*!*@FLAVlU.users.undernet.org n4=100:*!*@C0NF.users.undernet.org n5=100:*!*@PoChY.users.undernet.org n6=100:*!*@PoChyTT.users.undernet.org n7=100:*!*@HaCeRu.users.undernet.org n8=100:*!*@cstrike.flaviu.ro n9=100:*!*@85.204.8.152 n10=100:*!*@BI0S.users.undernet.org
Romanian Bot Nets Backdoor.IRC.Zapchast [13:46] <craigs> da add la drone [13:46] <craigs> :P [13:46] <|Robert> da da:) Nu e voie [13:46] <craigs> lul [13:47] <craigs> dc ma? [13:47] <|Robert> asa :P [13:47] <|Robert> lasale k oricum o sa vina multe :) [13:47] <|Robert> cautami un php in kre sa mearga upload acolo unde iti deschide el [13:47] <|Robert> sau las k fac io :)
Romanian Bot Nets Backdoor.IRC.Zapchast [13:48] <craigs> mie nu poti sa imi faci o arhiva de drone pls ? [13:48] <craigs> sa dau si eu spam ? [13:48] <craigs> sa facem multi boti ? [13:48] <|Robert> :) [13:48] <|Robert> dar ai mailuri ? :) [13:49] <craigs> nam nika [13:49] <craigs> :) [13:49] <|Robert> :\ las k dau eu spam :) [13:49] <|Robert> aici ;) ajunge [13:50] <craigs> ok3 [13:50] <|Robert> ;)
VoIP: Virus over IP Win32.HLLW.Crazy.A
VoIP: Virus over IP Win32.HLLW.Crazy.A
VoIP: Virus over IP Win32.HLLW.Crazy.A
VoIP: Virus over IP Win32.HLLW.Crazy.A
“Experti” in antivirus Adware.ExpertAntivirus.A
“Experti” in antivirus Adware.ExpertAntivirus.A
Cum stam?
XREF Project -- AV-Test GmbH; Last Updated: 2007-08-20 NUMBER OF SAMPLES: 874822 (including: bots, backdoors, Trojan Horses and worms)
Q & A