Matthew Burling wrote:
C:\windows\system32\dxmsrv.exe C:\windows\system32\winmes.exe
Submit your suspicious file to norman sandbox ( http://sandbox.norman.no/live_4.html ), it will tell you if these are bots contacting their 0wner via some irc channel and other suspicious activity.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
