On Mon, 26 Mar 2007 07:50:13 +0300, Henning Hasemann <hhasemann@web.de> wrote:

> Just waiting for clamav to be pulled through this damn ISDN line to get a name for that shit.

It's an IRC botnet client (possibly bundled with other "goodies"). NOD32 calls it "IRC/Zapchast.G".

-- 
Best regards,
  Vladimir                          mailto:thecybershadow@gmail.com

On Mon, 26 Mar 2007 06:50:13 +0200
Henning Hasemann <hhasemann@web.de> wrote:


> Just waiting for clamav to be pulled through this damn ISDN line to get a name for that shit.

FYI, its "Trojan.Servu-69", at least in that one file, but I guess they're pointing all to the same two files nevertheless.

Henning
-- 
v4sw7Yhw4ln0pr7Ock2/3ma7uLw5Xm0l6/7DGKi2e6t6ELNSTVXb7AHIMOen5a2Xs5Mr2g5ACPR hackerkey.com