RE: Re: pnp worm unknown variant - post infectionactions

["frac" <fractalg () highspeedweb net>]

> > Does it install child pornographic malware, or have you confirmed that 
> > all of the exposed genitalia are attached to a natural person who is 
> > more than 18 years of age?

> i only noted the malware address 'http://install.xxxtoolbar.com";
> i did not test the xxxtoolbar malware itself

> wtf would you ask that anyway?
> I am simply pointing out that the worm is being used by malware enities to
distribute their malcode

Because it can be interesting for criminal cases, following the previous
Trojan discussion... Or Jason is only playing around with you ;)

Just grab a coy of Windows 2000, connect it to the net, get infected, and
voila, let the worm ride you thru the world of child pornography.

After that, those forensic experts, will conclude that the suspect was
indeed browsing for child p0rn, because he's so l33t he can distinguish
between a worm and complete human intervention!



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/