rpc/dcom -- de ja vu?

["Justin Shin" <zorkshin () tampabay rr com>]

hi guys

Anyone recognize this directory listing (my guess is next to the name)

tftpd32.exe   < trivial ftp daemon
rpc.exe   < ?
r_server.exe   < radmin server
raddrv.dll    < include dll for radmin
AdmDll.dll    < include dll for radmin
rad.bat     < 1337 h4x0r b47ch file
rpc.bat     < another 1337 h4x0r b47ch file
cygwin1.dll    < duh
DCOM32.exe    < exploit
NC.exe     < netcat

I first saw this on my friend's computer ... I assumed it was justa guy with some spare time screwing around ... 
however, I have observed this on one of my client's computers as well.

-- Justin

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html