[Dshield] Re: list Digest, Vol 10, Issue 2

[[EMAIL PROTECTED]]

In response to the regloadr.exe and the port 135 activity,  I encountered a
keystroke logger called regload.exe.   It stores all keystrokes in a file
called regload.hlp (which is a text file).

This regloadr.exe may be some variant that sends the keystrokes over the
network.   I would look for files in the %systemroot% folder, especially
recently modified files to see if keystrokes are being logged somewhere.

Emmett.



_______________________________________________
list mailing list
[EMAIL PROTECTED]
To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list