Backdoor.berbew.p now totally paranoid

From: Alex Potter (apotter_at_videotron.ca)
Date: 01/27/05 

Date: Thu, 27 Jan 2005 15:09:17 -0500

Hi there,

I had a post going on w2k general but David Lipman(Thank you David) pointed
me to this news group.
I recently(yesterday) recovered from a Backdoor.Berber.P attack which has
left me completely paranoid...So
I did a search of my system of files that have been modified within the last
month & have been slowly(1082 files)
checking to see if the modification makes sense!!!
I just came across a dll file(wszt3t2.dll) that was created on the 24th,
modified yesterday, and access today.
(today access could have been me)
So I opened it up in ultraedit and to my surprise it contains a text list of
urls with usernames etc - a small list follows:

<pop.videotron.ca> pop.videotron.ca relais.videotron.ca Alex
Potter<username> () vldghgoc:temp01
[http://lc3.law13.hotmail.passport.com/cgi-bin/login]
username:,username:,username:
[http://localhost/dir/] username:
[https://www.leevalley.com/home/shopLogin.asp] username:password

Now I'm kindof nervous

Any thoughts???

TIA

Alex Potter

Relevant Pages

  • Re: Wunny is my God.
    ... >>> I don't see any attack on The Nieporent's homosexuality. ... I'm still waiting to see that great "clever insult" he claims ... David M. Nieporent nieporen@xxxxxxxxxxxxxxxxxxxx ...
    (rec.sport.baseball)
  • Re: Smelling fear
    ... mentality to take advantage and attack him? ... Our childhood dog, Sleepy, had never shown aggression towards anything. ... Sleepy was hanging out, lying on the grass, sniffing the occasional bush, not doing much. ... David picked up the kitten in the spare moment. ...
    (rec.pets.dogs.behavior)
  • Re: Inversion training!
    ... >>>I think David and David should make some fire together under a teepee. ... >>>They sure like to agree with each other and attack my reasoned points with ... >personal website which has photos of me and mine, ... >former regulars know my address and phone number, ...
    (misc.fitness.weights)
  • Re: can visual basic turn off confirmation of action queries
    ... you can follow David Holley's suggestion about ... That rather sounds like an attack, ... against changing his users' option settings, ... Dirk Goldgar, MS Access MVP ...
    (microsoft.public.access.modulesdaovba)
  • Re: Canon Rebel XT & Lexar CF cards, how bad is it really?
    ... > David, I simply refuse to discuss anything further with you. ... > insulted no one, including you, who didn't attack my ... > intelligence, knowledge, and experience first. ...
    (rec.photo.digital)
Quantcast