Re: Know anything about this? - JAcheck.dll

From: Bill Sanderson (Bill_Sanderson_at_msn.com.plugh.org)
Date: 11/19/03 

Date: Tue, 18 Nov 2003 19:32:50 -0500

How's your Russian?

http://www.kpnemo.ru/index.php?pageID=151

I'm not sure how many critters you have here. Uptime, is benign, I
think,but it is quite different from the one I have in mind, which is 45k.

The ServUDeamon etc. goes with root.rar which I thought was suspect
originally. could be this:

http://vil.nai.com/vil/content/v_100427.htm

Looks pretty likely, actually.

I doubt that covers all of your list--I don't think they are all necessarily
related.

"George Hester" <hesterloli@hotmail.com> wrote in message
news:ObkDQYirDHA.2148@TK2MSFTNGP12.phx.gbl...
These are its siblings:

10/09/2003 03:29p 29,696 HIDDEN32.exe
02/15/2003 06:19p 103,936 JAcheck.dll
10/28/2003 08:16p 784 JAcheck.ini
10/09/2003 03:29p 59,392 nc.exe
10/09/2003 03:29p 77,824 pskill.exe
10/27/2003 03:39p 34,304 pulist.exe
11/18/2003 04:47p 827,317 root.rar
09/26/2003 09:45p 55 scan.bat
08/19/2003 12:04p 87,040 scan500.exe
10/24/2003 08:07p 2,819 Search.bat
01/03/2003 12:59p 2,121,216 ServUDaemon.exe
11/18/2003 04:49p 898 ServUDaemon.ini
11/18/2003 04:49p 670 ServUStartUpLog.txt
07/30/2003 01:57p 936 startup.txt
09/01/1998 01:44p 28,340 tar.exe
11/18/2003 04:48p 90,112 unrar.exe
10/09/2003 03:29p 6,656 uptime.exe

pkill is from SysInternals. 

-- 
George Hester
__________________________________