[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    Re: [Full-Disclosure] Sears Scam Trojan Code
From:       Jarkko Turkulainen <jt () klake ! org>
Date:       2003-12-27 18:23:22
[Download RAW message or body]


Took some time to realize, but the proxy is a standard SOCKS V4. What's
interesting, the proxy port is chosen by the system (next port
available) and it's announced every 30 secs to cjdra.com as indicated in
the earlier post. The cjdra.com IP also seem to change very often..
That's all, I guess.


Regards,

--
Jarkko Turkulainen <jt@klake.org>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
[prev in list] [next in list] [prev in thread] [next in thread]